JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.234.19.47

Recent Activity

Abuse Confidence Score

73% Elevated

165 reports

82 reporters · latest 2 hours ago

ISP: Internet Utilities NA LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS206092
Domain Name: netutils.io
Country: 🇺🇸 United States of America
City: Miami, Florida

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

165 from 82 distinct reporters

First reported

April 23rd 2025

Most recent report

2 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 4 🇺🇸 United States of America 2 🇦🇺 Australia 1

Most common categories Web App Attack 11 Brute-Force 7 Bad Web Bot 4

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 plzenskypruvodce.cz	2026-11-10 14:42:58 UTC · (2 hours ago)	[Tue Nov 10 15:42:57.559923 2026] [authz_core:error] [pid 3606985:tid 3607036] [client 104.234.19.47:41453] AH01630: client denied by server configuration: /var/www/baletniskola-ok.cz/www/wp-content/wp-setting.php [Tue Nov 10 15:42:57.816192 2026] [a ... show more [Tue Nov 10 15:42:57.559923 2026] [authz_core:error] [pid 3606985:tid 3607036] [client 104.234.19.47:41453] AH01630: client denied by server configuration: /var/www/baletniskola-ok.cz/www/wp-content/wp-setting.php [Tue Nov 10 15:42:57.816192 2026] [authz_core:error] [pid 3606985:tid 3607020] [client 104.234.19.47:41453] AH01630: client denied by server configuration: /var/www/baletniskola-ok.cz/www/wp-includes/hp2.php ... show less	Web App Attack
🇩🇪 33three	2026-11-10 12:51:35 UTC · (3 hours ago)	Fail2Ban jail WebAttack triggered	Brute-Force
🇦🇺 aranguren.org	2026-11-10 03:19:58 UTC · (13 hours ago)	104.234.19.47 - - [10/Nov/2026:14:19:57 +1100] "GET /abcd.php HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 104.234.19.47 - - [10/Nov/2026:14:19:57 +1100] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 404 986 "-" "Go-http-client/1.1" 104.234.19.47 - - ... show more 104.234.19.47 - - [10/Nov/2026:14:19:57 +1100] "GET /abcd.php HTTP/1.1" 404 16 "-" "Go-http-client/1.1" 104.234.19.47 - - [10/Nov/2026:14:19:57 +1100] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 404 986 "-" "Go-http-client/1.1" 104.234.19.47 - - [10/Nov/2026:14:19:58 +1100] "GET /dex.php HTTP/1.1" 404 16 "-" "Go-http-client/1.1" ... show less	Bad Web Bot
🇮🇹 CoreTech srl	2026-11-09 23:08:57 UTC · (17 hours ago)	cloudlinux2 fail2ban: 2026-11-10 00:04:21,969 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 104.244.225.163 - 2026-11-10 00:04:21cloudlinux2 fail2ban: 2026-11-10 00:04:34,458 fail2ban.actions [1667]: NOTICE [plesk-modsecurit ... show more cloudlinux2 fail2ban: 2026-11-10 00:04:21,969 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 104.244.225.163 - 2026-11-10 00:04:21cloudlinux2 fail2ban: 2026-11-10 00:04:34,458 fail2ban.actions [1667]: NOTICE [plesk-modsecurity] Unban 104.23.239.132cloudlinux2 fail2ban: 2026-11-10 00:05:08,841 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 196.224.148.181 - 2026-11-10 00:05:07cloudlinux2 fail2ban: 2026-11-10 00:05:33,108 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 186.129.24.128 - 2026-11-10 00:05:32cloudlinux2 fail2ban: 2026-11-10 00:05:48,718 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 91.226.35.203 - 2026-11-10 00:05:47cloudlinux2 fail2ban: 2026-11-10 00:06:26,417 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 172.64.198.206 - 2026-11-10 00:06:26cloudlinux2 fail2ban: 2026-11-10 00:06:33,474 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 104.234.19.47 - 2026-11-10 00:06:32cloudlinux2 fail2ban show less	Web App Attack
🇩🇪 big-cloud.nl	2026-11-09 09:23:45 UTC · (1 day ago)	Try to access /xmlrpc.php	Web App Attack
Anonymous	2026-11-09 03:55:30 UTC · (1 day ago)	104.234.19.47 - - [09/Nov/2026:11:55:30 +0800] "POST /xmlrpc.php HTTP/1.1" 301 243 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36" ...	Bad Web Bot Web App Attack
🇩🇪 svr	2026-11-08 03:55:34 UTC · (2 days ago)	Abusive Automated Web Scanner	Web App Attack
🇫🇮 6kilowatti	2026-11-07 17:39:56 UTC · (2 days ago)	2026/11/07 19:39:55 [error] 724987#724987: 50165 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.234.19.47, server: oh6ah.fi, request: "GET /wp-admin/css/admin.php HTTP/1.1", upstream: "fastc ... show more 2026/11/07 19:39:55 [error] 724987#724987: 50165 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.234.19.47, server: oh6ah.fi, request: "GET /wp-admin/css/admin.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi" 2026/11/07 19:39:56 [error] 724987#724987: *50165 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.234.19.47, server: oh6ah.fi, request: "GET //wp-admin/css/about.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi" ... show less	Web App Attack
🇹🇷 Jova	2026-11-03 13:58:52 UTC · (1 week ago)	WordPress login brute force with a forged browser User-Agent: 1 attempts.	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-03 12:12:03 UTC · (1 week ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇸🇬 pusathosting.com	2026-10-14 10:10:05 UTC · (3 weeks ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-10-14 09:56:37 UTC · (3 weeks ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-10-14 09:31:58 UTC · (3 weeks ago)	(mod_security) mod_security (id:240000) triggered by 104.234.19.47 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 05:31:52.681878 2026] [security2:error] [pid 3727:tid 3727] [client 104.234.19.47:39589] Mod ... show more (mod_security) mod_security (id:240000) triggered by 104.234.19.47 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 05:31:52.681878 2026] [security2:error] [pid 3727:tid 3727] [client 104.234.19.47:39589] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|sigrc.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "sigrc.org"] [uri "/images/stories/themes.php"] [unique_id "as9MCM44D_mQ6k3PGW-ZcQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-10-13 16:30:10 UTC · (4 weeks ago)	Wordfence waf block on madesimpleskincare	Web App Attack
🇫🇷 ELYAZ	2026-10-13 02:21:25 UTC · (4 weeks ago)	(wordpress) Failed wordpress login from 104.234.19.47 (US/United States/-): (CF_ENABLE)	Brute-Force

Showing 1 to 15 of 165 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇮 102.220.161.79

🇫🇷 62.169.25.98

🇧🇪 35.206.156.217

🇮🇷 2.187.186.161

🇰🇷 220.116.117.213

🇦🇷 179.0.183.104

🇺🇸 165.22.12.196

🇺🇸 136.109.17.95

🇩🇪 84.200.91.197

🇷🇴 80.94.92.55

🇳🇱 45.148.10.157

🇺🇸 35.188.106.151

🇮🇪 3.249.61.121

🇨🇭 209.99.190.186

🇨🇭 179.43.153.2

🇳🇱 144.124.225.121

🇬🇧 82.42.61.32

🇷🇺 91.215.85.193

🇩🇪 64.89.163.142

🇺🇸 3.23.86.80