JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.239.66.3

Neutral Activity

Abuse Confidence Score

0% Low Risk

14 reports

9 reporters · latest 5 months ago

ISP: Stellar Group SAS
Usage Type: Data Center/Web Hosting/Transit
ASN: AS214961
Domain Name: stellar-group.fr
Country: 🇫🇷 France
City: Marseille, Provence-Alpes-Cote d'Azur

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.239.66.3 has been reported 14 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

14 from 9 distinct reporters

First reported

May 17th 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-11 05:46:24 UTC · (5 months ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2026-06-09 20:46:13 UTC · (5 months ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2026-06-08 11:27:57 UTC · (5 months ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2026-06-07 14:27:07 UTC · (5 months ago)	2026-06-07T16:27:07.052035+02:00 zanati wp(www.sahpa.co.za)[37509]: Blocked authentication attempt for Lisa from 104.239.66.3 ...	Web App Attack
Anonymous	2026-06-02 19:48:31 UTC · (5 months ago)	2026-06-02T21:48:31.559718+02:00 zanati wp(www.sahpa.co.za)[2987709]: Blocked authentication attempt for Lisa from 104.239.66.3 ...	Web App Attack
🇫🇷 Baking333	2026-05-31 20:01:03 UTC · (5 months ago)	[redacted] 104.239.66.3 - - [31/May/2026:21:00:58 +0100] "GET /administrator/[redacted] HTTP/2.0" 301 294 "https://[redacted]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" [red ... show more [redacted] 104.239.66.3 - - [31/May/2026:21:00:58 +0100] "GET /administrator/[redacted] HTTP/2.0" 301 294 "https://[redacted]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" [redacted] 104.239.66.3 - - [31/May/2026:21:00:59 +0100] "GET /administrator/ HTTP/2.0" 301 76 "https://[redacted]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-05-31 07:30:11 UTC · (5 months ago)	104.239.66.3 - - [31/May/2026:09:30:09 +0200] "POST /wp-login.php HTTP/1.1" 200 2524 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.239.66.3 - - [31/ ... show more 104.239.66.3 - - [31/May/2026:09:30:09 +0200] "POST /wp-login.php HTTP/1.1" 200 2524 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.239.66.3 - - [31/May/2026:09:30:09 +0200] "POST /wp-login.php HTTP/1.1" 200 2017 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.239.66.3 - - [31/May/2026:09:30:09 +0200] "POST /wp-login.php HTTP/1.1" 200 2652 "https://learningladderzm.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.239.66.3 - - [31/May/2026:09:30:09 +0200] "POST /wp-login.php HTTP/1.1" 200 2145 "https://learningladderzm.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.239.66.3 - - [31/May/2026:09:30:11 +0200] "POST /xml ... show less	Brute-Force Web App Attack
🇩🇪 4server	2026-05-31 02:01:31 UTC · (5 months ago)	[SunMay3104:01:29.4247882026][security2:error][pid445072:tid445158][client104.239.66.3:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"xmlrpc\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/03_asl_dos.conf\"][line\"65 ... show more [SunMay3104:01:29.4247882026][security2:error][pid445072:tid445158][client104.239.66.3:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"xmlrpc\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/03_asl_dos.conf\"][line\"65\"][id\"392331\"][rev\"3\"][msg\"Atomicorp.comWAFRules:xmlrpcDOSattack\"][severity\"CRITICAL\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"ahuWeX0PzWZXd6joPMZrHQAAAIo\"]\,referer:https://www.google.com/ show less	Port Scan Brute-Force Web App Attack
🇩🇪 Martin Lundstrom	2026-05-30 23:47:26 UTC · (5 months ago)	https://www.eagleeye-intelligence.com — WordPress attack. Automatically detected and blocked.	Web App Attack
🇺🇸 oralunal	2026-05-30 13:14:44 UTC · (5 months ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-05-30 07:03:08 UTC · (5 months ago)	[redacted] 104.239.66.3 - - [30/May/2026:08:03:06 +0100] "GET /administrator/[redacted] HTTP/2.0" 301 295 "https://[redacted]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" [red ... show more [redacted] 104.239.66.3 - - [30/May/2026:08:03:06 +0100] "GET /administrator/[redacted] HTTP/2.0" 301 295 "https://[redacted]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" [redacted] 104.239.66.3 - - [30/May/2026:08:03:06 +0100] "GET /administrator/ HTTP/2.0" 301 53 "https://[redacted]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	Bad Web Bot Web App Attack
🇧🇷 vfAcceloReporter	2026-05-18 16:50:20 UTC · (5 months ago)	104.239.66.3 - - [18/May/2026:13:50:16 -0300] "POST /wp-login.php HTTP/1.1" 404 125 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.239.66.3 - - [18/M ... show more 104.239.66.3 - - [18/May/2026:13:50:16 -0300] "POST /wp-login.php HTTP/1.1" 404 125 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.239.66.3 - - [18/May/2026:13:50:16 -0300] "POST /wp-login.php HTTP/1.1" 404 126 "https://wp.vieirafilho.com.br/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.239.66.3 - - [18/May/2026:13:50:17 -0300] "POST /wp-login.php HTTP/1.1" 404 125 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.239.66.3 - - [18/May/2026:13:50:17 -0300] "POST /wp-login.php HTTP/1.1" 404 126 "https://wp.vieirafilho.com.br/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.239.66.3 - - [18/May/2026:13:50:17 -0300] "POST /xmlrp ... show less	Brute-Force Web App Attack Exploited Host
🇧🇷 vfAcceloReporter	2026-05-17 18:31:25 UTC · (5 months ago)	104.239.66.3 - - [17/May/2026:15:31:23 -0300] "POST /wp-login.php HTTP/1.1" 404 126 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.239.66.3 - - [17/M ... show more 104.239.66.3 - - [17/May/2026:15:31:23 -0300] "POST /wp-login.php HTTP/1.1" 404 126 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.239.66.3 - - [17/May/2026:15:31:23 -0300] "POST /wp-login.php HTTP/1.1" 404 126 "https://wp.vieirafilho.com.br/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.239.66.3 - - [17/May/2026:15:31:24 -0300] "POST /wp-login.php HTTP/1.1" 404 126 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.239.66.3 - - [17/May/2026:15:31:24 -0300] "POST /wp-login.php HTTP/1.1" 404 126 "https://wp.vieirafilho.com.br/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.239.66.3 - - [17/May/2026:15:31:25 -0300] "POST /xmlrp ... show less	Brute-Force Web App Attack Exploited Host
🇫🇷 Tilellit.PRO	2026-05-17 16:08:38 UTC · (5 months ago)	Fail2Ban banned 104.239.66.3 for security violations in jail wp-armour. Log: 2026/05/17 16:08:37 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.239.66.3 \| Target: wplogin" , client: 104.239.66.3, server: [REDACTED], request: "P ... show more Fail2Ban banned 104.239.66.3 for security violations in jail wp-armour. Log: 2026/05/17 16:08:37 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.239.66.3 \| Target: wplogin" , client: 104.239.66.3, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-admin/" ... show less	Web Spam

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 2602:80d:1005::15

🇺🇸 45.8.19.243

🇺🇸 216.25.89.107

🇺🇸 205.188.164.190

🇳🇱 193.176.31.244

🇵🇱 166.88.140.77

🇵🇱 166.88.60.139

🇹🇭 152.32.245.170

🇺🇸 147.185.132.126

🇹🇭 118.193.56.184

🇮🇳 111.235.64.172

🇸🇮 102.220.161.170

🇰🇪 102.210.148.41

🇳🇱 93.123.109.247

🇺🇸 92.112.57.226

🇵🇱 89.67.37.52

🇺🇸 84.37.183.35

🇺🇸 84.37.66.135

🇺🇸 84.37.66.58

🇺🇸 52.53.130.228