109.104.217.42

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
58% Elevated
18 reports
14 reporters ยท latest 2 days ago
ISP
Bergon Internet Ltd.
Usage Type
Fixed Line ISP
ASN
AS12436
Domain Name
bergon.net
Country
๐Ÿ‡ง๐Ÿ‡ฌ Bulgaria
City
Dobrich, Dobrich
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 8 ๐Ÿ‡จ๐Ÿ‡ญ Switzerland 3 ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands 2
Most common categories Web App Attack 17 Hacking 4 Brute-Force 4 Bad Web Bot 3 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡จ๐Ÿ‡ญ 4server
Hacking Web App Attack
Anonymous
Bad Web Bot Web App Attack
๐Ÿ‡จ๐Ÿ‡ญ copestack
Honeypot hit on ov-4e5936 (fail2ban jail: nginx-compat)
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช stinpriza
Web App Attack
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช big-cloud.nl
Try to access /xmlrpc.php
Web App Attack
Anonymous
WordPress login / xmlrpc probing across multiple sites
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, POST /xmlrpc.php HTTP/1.1, GET /wp-json/wp/v2/users HTTP/1.1
Hacking Web App Attack
๐Ÿ‡บ๐Ÿ‡ฆ Olexiy Backend
109.104.217.42 ...
Bad Web Bot Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช big-cloud.nl
Try to access /xmlrpc.php
Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ Alt255
Brute-Force Bad Web Bot Web App Attack
Anonymous
109.104.217.42 - - [14/Oct/2026:10:41:21 +0200] "POST / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/64.0.0.0 Safari/537.36"
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช LRob
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/100.0.0.0 Safari/537.36
Web App Attack Hacking
๐Ÿ‡ฎ๐Ÿ‡น VHosting
Detected WordPress attack from different servers
Brute-Force Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช 4server
Port Scan Brute-Force Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช big-cloud.nl
Try to access /xmlrpc.php
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฒ๐Ÿ‡ฝ 200.52.196.233
๐Ÿ‡ธ๐Ÿ‡ช 195.178.191.5
๐Ÿ‡บ๐Ÿ‡ธ 157.245.179.96
๐Ÿ‡บ๐Ÿ‡ธ 140.235.19.17
๐Ÿ‡ฉ๐Ÿ‡ช 69.5.169.100
๐Ÿ‡บ๐Ÿ‡ธ 57.141.20.64
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.157
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.152
๐Ÿ‡ง๐Ÿ‡ช 35.210.123.92
๐Ÿ‡บ๐Ÿ‡ธ 20.169.91.21
๐Ÿ‡ณ๐Ÿ‡ฑ 204.76.203.44
๐Ÿ‡จ๐Ÿ‡ฑ 186.104.240.38
๐Ÿ‡บ๐Ÿ‡ธ 184.105.139.75
๐Ÿ‡ฒ๐Ÿ‡พ 165.154.147.69
๐Ÿ‡บ๐Ÿ‡ธ 158.94.187.39
๐Ÿ‡ต๐Ÿ‡ฐ 153.117.73.53
๐Ÿ‡จ๐Ÿ‡ณ 120.48.39.143
๐Ÿ‡ฉ๐Ÿ‡ช 109.160.32.139
๐Ÿ‡ซ๐Ÿ‡ท 104.168.10.134
๐Ÿ‡ซ๐Ÿ‡ท 78.155.152.231