JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.234.32.142

104.234.32.142 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 47%: ?

47%

ISP	AS206092 Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	abuseradar.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.234.32.142

Whois 104.234.32.142

IP Abuse Reports for 104.234.32.142:

This IP address has been reported a total of 60 times from 38 distinct sources. 104.234.32.142 was first reported on October 11th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Marc	2026-06-03 19:48:52 (1 day ago)	104.234.32.142 - - [03/Jun/2026:21:48:47 +0200] "POST /wp-login.php HTTP/1.1" 200 7119 "https://lost ... show more 104.234.32.142 - - [03/Jun/2026:21:48:47 +0200] "POST /wp-login.php HTTP/1.1" 200 7119 "https://lostplace.art/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/121.0" 104.234.32.142 - - [03/Jun/2026:21:48:48 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Flostplace.art%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 5479 "https://lostplace.art/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/121.0" 104.234.32.142 - - [03/Jun/2026:21:48:49 +0200] "POST /wp-login.php HTTP/1.1" 200 4482 "https://lostplace.art/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1" 104.234.32.142 - - [03/Jun/2026:21:48:50 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Flostplace.art%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 5479 "https://lostplace.art/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1" 104.234.32.142 - - [03/Jun/2026:21:48:50 +0200] "POST /wp-login.php HTTP/1.1" 200 show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-06-03 00:55:00 (2 days ago)	(wordpress) Apache: Failed WordPress login from 104.234.32.142 (US/United States/-): 10 in the last ... show more (wordpress) Apache: Failed WordPress login from 104.234.32.142 (US/United States/-): 10 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 mnsf	2026-06-02 23:05:41 (2 days ago)	Login Too Frequent (7)	Brute-Force Web App Attack
🇦🇺 [email protected]	2026-06-02 06:19:54 (2 days ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-login.php	Web App Attack
🇩🇪 LRob.fr	2026-06-01 18:45:03 (3 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-01 06:10:57 (3 days ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN CA/Canada/-	Web App Attack
🇺🇸 Victor López	2026-06-01 03:27:10 (4 days ago)	advisainternational.com 104.234.32.142 - - [31/May/2026:22:26:49 -0500] "GET /wp-login.php?redirect_ ... show more advisainternational.com 104.234.32.142 - - [31/May/2026:22:26:49 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fempresarioexpress.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 1891 "https://empresarioexpress.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/118.0.2" advisainternational.com 104.234.32.142 - - [31/May/2026:22:26:51 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fempresarioexpress.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 1891 "https://empresarioexpress.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" advisainternational.com 104.234.32.142 - - [31/May/2026:22:27:09 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fempresarioexpress.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 1891 "https://empresarioexpress.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/119.0.1" ... show less	Hacking Web App Attack
🇺🇸 mnsf	2026-05-31 20:06:19 (4 days ago)	Login Too Frequent (7)	Brute-Force Web App Attack
Anonymous	2026-05-12 14:31:33 (3 weeks ago)	Malicious activity detected	Hacking Web App Attack
🇮🇩 xveil	2026-03-31 10:47:49 (2 months ago)	2026-03-31T17:47:48.016435 mail-honeypot postfix/submission/smtpd[11046]: warning: unknown[104.234.3 ... show more 2026-03-31T17:47:48.016435 mail-honeypot postfix/submission/smtpd[11046]: warning: unknown[104.234.32.142]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇫🇮 diego021	2026-01-25 11:12:42 (4 months ago)	104.234.32.142 135.181.251.148 - [25/Jan/2026:06:12:39 -0500] "GET /.env HTTP/1.1" 404 341 "-" "Mozi ... show more 104.234.32.142 135.181.251.148 - [25/Jan/2026:06:12:39 -0500] "GET /.env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 104.234.32.142 135.181.251.148 - [25/Jan/2026:06:12:40 -0500] "GET /.env.save HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 104.234.32.142 135.181.251.148 - [25/Jan/2026:06:12:40 -0500] "GET /.env.old HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 104.234.32.142 135.181.251.148 - [25/Jan/2026:06:12:40 -0500] "GET /.env.prod HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" ... show less	Web App Attack
🇸🇬 anotherwatcher	2026-01-24 00:10:08 (4 months ago)	bad bot	Bad Web Bot
🇦🇿 Malina	2026-01-22 14:25:00 (4 months ago)	This IP address is actively used for social engineering and celebrity impersonation scams (Romance ... show more This IP address is actively used for social engineering and celebrity impersonation scams (Romance Scam) on Instagram. The user poses as a public figure to solicit trust and potential funds from victims. Technical evidence: User claims to be in the US but is utilizing a VPN/Proxy service ("Internet Utilities Europe and Asia Limited") to mask their real location. Device fingerprinting reveals an outdated Android 10 device, contradicting their persona. show less	VPN IP
🇨🇳 ThreatBook.io	2025-12-31 00:06:22 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/104.234.32.142 2025-12 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/104.234.32.142 2025-12-30 01:06:57 /.vscode/sftp.json 2025-12-30 01:08:59 /owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php 2025-12-30 01:08:30 /api/index.php/v1/config/application?public=true show less	Web App Attack
🇩🇪 iNetWorker	2025-12-30 10:59:25 (5 months ago)	trolling for resource vulnerabilities	Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇨 181.39.158.25

🇯🇵 160.251.185.39

🇨🇳 121.237.180.222

🇨🇳 121.29.5.181

🇮🇳 103.148.206.99

🇳🇱 85.11.167.7

🇺🇸 69.63.184.35

🇺🇸 66.154.107.138

🇸🇬 43.98.195.11

🇰🇷 14.55.31.113

🇺🇸 98.83.10.183

🇷🇺 95.68.159.112

🇩🇪 77.91.71.10

🇧🇪 34.53.188.148

🇯🇵 8.216.3.56

🇷🇴 2.57.122.238

🇺🇸 207.90.244.12

🇸🇾 185.225.41.192

🇰🇪 105.161.17.242

🇺🇸 104.243.35.120