JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.234.32.70

104.234.32.70 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 36%: ?

36%

ISP	AS206092 Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	abuseradar.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.234.32.70

Whois 104.234.32.70

IP Abuse Reports for 104.234.32.70:

This IP address has been reported a total of 55 times from 45 distinct sources. 104.234.32.70 was first reported on September 27th 2024, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-06-19 00:52:36 (21 hours ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
🇺🇸 mnsf	2026-06-18 01:09:20 (1 day ago)	Login Too Frequent (6)	Brute-Force Web App Attack
🇫🇷 dynamix	2026-06-17 11:24:15 (2 days ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇫🇷 Kenshin869	2026-05-24 14:48:17 (3 weeks ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-04-27 03:43:06 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 104.234.32.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.234.32.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 23:42:56.627347 2026] [security2:error] [pid 9628:tid 9628] [client 104.234.32.70:30533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mathewsdental.com"] [uri "/.env.example"] [unique_id "ae7bQCbCMk4EgVGp8uSt7QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-04-27 01:13:54 (1 month ago)	(mod_security) mod_security (id:949110) triggered by 104.234.32.70 (US/United States/-): N in the la ... show more (mod_security) mod_security (id:949110) triggered by 104.234.32.70 (US/United States/-): N in the last X secs show less	Web App Attack
🇫🇮 danskefilm.dk	2026-04-27 01:00:01 (1 month ago)	wordpress login attempts	Web App Attack
🇩🇪 raph	2026-04-27 00:32:52 (1 month ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇬🇧 CrystalMaker	2026-04-27 00:24:37 (1 month ago)	Vulnerability scan - GET /.env.copy	Hacking
🇨🇳 ThreatBook.io	2026-04-13 23:34:48 (2 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.234.32.70 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.234.32.70 2026-04-13 11:55:44 /..;/env.dev.js 2026-04-13 22:26:07 /web/config.js 2026-04-13 11:54:50 /AwsConfig.json 2026-04-13 22:25:59 /database-config.json show less	Web App Attack
🇫🇮 misfit	2026-04-13 15:32:57 (2 months ago)	Web scan (6 x 404);Malicious paths: /back/.env,/core/.env,/docker/.env. Org: AS206092 F.N.S. HOLDING ... show more Web scan (6 x 404);Malicious paths: /back/.env,/core/.env,/docker/.env. Org: AS206092 F.N.S. HOLDINGS LIMITED, Chicago, US. show less	Brute-Force Web App Attack SSH
🇺🇸 stvnrdg.me	2026-04-13 13:07:43 (2 months ago)	104.234.32.70 - - [13/Apr/2026:13:07:42 +0000] "GET /tool/view/phpinfo.view.php HTTP/1.1" 404 4176 " ... show more 104.234.32.70 - - [13/Apr/2026:13:07:42 +0000] "GET /tool/view/phpinfo.view.php HTTP/1.1" 404 4176 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" ... show less	Hacking
Anonymous	2026-04-10 22:41:59 (2 months ago)	2026-04-10T22:41:57.882990+00:00 caddy caddy[81692]: {"level":"info","ts":1775860917.88276,"logger": ... show more 2026-04-10T22:41:57.882990+00:00 caddy caddy[81692]: {"level":"info","ts":1775860917.88276,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"104.234.32.70","remote_port":"46401","client_ip":"104.234.32.70","proto":"HTTP/1.1","method":"GET","host":"142.132.232.19","uri":"/.env.prod","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"],"Accept-Encoding":[""],"Accept":["/*"],"Connection":["keep-alive"]}},"bytes_read":0,"user_id":"","duration":0.00004852,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://142.132.232.19/.env.prod"]}} ... show less	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-04-10 13:48:45 (2 months ago)	Try to access /cp/.env	Web App Attack
Anonymous	2026-04-09 19:50:07 (2 months ago)	104.234.32.70 - - [09/Apr/2026:21:50:07 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" ... show more 104.234.32.70 - - [09/Apr/2026:21:50:07 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 190.164.179.82

🇺🇸 162.216.149.188

🇷🇺 83.246.133.16

🇫🇷 51.210.0.2

🇳🇱 45.148.10.151

🇷🇺 5.255.231.22

🇷🇴 193.46.255.86

🇳🇱 185.242.226.58

🇬🇧 172.237.117.50

🇩🇪 167.172.187.11

🇫🇮 147.185.133.103

🇺🇸 98.83.177.42

🇨🇳 58.19.106.66

🇨🇳 39.144.60.194

🇺🇸 17.22.237.122

🇮🇳 218.248.19.102

🇬🇧 195.140.214.30

🇮🇳 113.193.187.154

🇫🇷 80.241.222.32

🇷🇺 45.91.64.6