JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.141.39.104

209.141.39.104 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 0%: ?

ISP	FranTech Solutions
Usage Type	Content Delivery Network
ASN	AS53667
Hostname(s)	basaleiaconsulting.com
Domain Name	frantech.ca
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.141.39.104

Whois 209.141.39.104

IP Abuse Reports for 209.141.39.104:

This IP address has been reported a total of 60 times from 33 distinct sources. 209.141.39.104 was first reported on December 6th 2022, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NxtGenIT	2024-05-15 01:05:20 (2 years ago)	209.141.39.104 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Atte ... show more 209.141.39.104 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇨🇿 lp	2024-05-14 04:59:35 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 209.141.39.104 2024-05-14T05:03:58+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 209.141.39.104 2024-05-14T05:03:58+02:00 vpn Access-Reject 'qsadmin' station: 209.141.39.104 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-05-13 13:57:08 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 209.141.39.104 2024-05-13T13:53:05+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 209.141.39.104 2024-05-13T13:53:05+02:00 vpn Access-Reject 'adminqu' station: 209.141.39.104 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇩🇪 localhost-admin	2024-05-11 22:20:02 (2 years ago)	Unauthorized connection attempt detected, SMTP Brute-Force	Brute-Force
🇩🇪 CR Honey Pot	2024-05-11 14:00:47 (2 years ago)	Brute force IMAP login ...	Brute-Force
🇺🇸 TPI-Abuse	2024-05-10 17:56:20 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 209.141.39.104 (tor-exit-1.spooky69.eu): 1 in t ... show more (mod_security) mod_security (id:210730) triggered by 209.141.39.104 (tor-exit-1.spooky69.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 10 13:56:13.856119 2024] [security2:error] [pid 29280] [client 209.141.39.104:42912] [client 209.141.39.104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|hollywooddrummers.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hollywooddrummers.com"] [uri "/hollywooddr.sql"] [unique_id "Zj5fvQCca1xza-icXoRZaAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-10 14:50:57 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 209.141.39.104 (tor-exit-1.spooky69.eu): 1 in t ... show more (mod_security) mod_security (id:210730) triggered by 209.141.39.104 (tor-exit-1.spooky69.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 10 10:50:51.996604 2024] [security2:error] [pid 3991026] [client 209.141.39.104:37764] [client 209.141.39.104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gazelleplanner.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gazelleplanner.com"] [uri "/gazell.sql"] [unique_id "Zj40SxAxA9ntrolklGFYYQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2024-05-09 22:56:28 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 209.141.39.104 2024-05-09T23:37:28+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 209.141.39.104 2024-05-09T23:37:28+02:00 vpn Access-Reject '[email protected]' station: 209.141.39.104 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-05-09 03:06:34 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 209.141.39.104 (tor-exit-1.spooky69.eu): 1 in t ... show more (mod_security) mod_security (id:210730) triggered by 209.141.39.104 (tor-exit-1.spooky69.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 08 23:06:30.120028 2024] [security2:error] [pid 15868] [client 209.141.39.104:37784] [client 209.141.39.104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|songwriterdemo.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "songwriterdemo.com"] [uri "/wp.sql"] [unique_id "Zjw9thnwhLF6_ja4GJomcgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Nicolmn	2024-05-08 13:22:26 (2 years ago)	Web form spam ( id lmn.l )	Web Spam
🇳🇱 wlt-blocker	2024-05-07 17:23:25 (2 years ago)	Attempts to login to mail server with wrong username and/or password	Brute-Force
🇨🇿 lp	2024-05-05 19:56:55 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 209.141.39.104 2024-05-05T21:01:59+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 209.141.39.104 2024-05-05T21:01:59+02:00 vpn Access-Reject '[email protected]' station: 209.141.39.104 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇭 backslash	2024-05-05 08:14:25 (2 years ago)		Web Spam
🇺🇸 TPI-Abuse	2024-05-04 21:07:54 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 209.141.39.104 (tor-exit-1.spooky69.eu): 1 in t ... show more (mod_security) mod_security (id:210730) triggered by 209.141.39.104 (tor-exit-1.spooky69.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 04 17:07:50.753086 2024] [security2:error] [pid 19893] [client 209.141.39.104:56790] [client 209.141.39.104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ruthbalser.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ruthbalser.org"] [uri "/ser.sql"] [unique_id "Zjajpvef7kE5FvSpQfxZzQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-03 03:03:36 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 209.141.39.104 (tor-exit-1.spooky69.eu): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 209.141.39.104 (tor-exit-1.spooky69.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 02 23:03:32.581811 2024] [security2:error] [pid 14574] [client 209.141.39.104:40738] [client 209.141.39.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bndtreats903.com"] [uri "/.env"] [unique_id "ZjRUBO47bcJ_6ScG8v-29gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.208

🇪🇸 172.110.221.82

🇺🇸 129.121.85.48

🇺🇸 20.51.241.104

🇨🇳 1.183.174.186

🇲🇦 197.147.133.16

🇬🇧 193.163.125.112

🇨🇱 170.82.129.8

🇹🇼 111.249.182.46

🇮🇳 103.147.239.70

🇷🇺 95.165.68.145

🇫🇷 87.98.220.168

🇺🇿 84.54.73.204

🇧🇷 45.232.9.83

🇨🇳 42.180.4.166

🇺🇸 20.168.106.240

🇰🇷 14.46.87.209

🇺🇸 2607:f8b0:4001:c32::12a

🇰🇷 222.110.147.58

🇩🇪 213.209.159.11