JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.243.35.58

104.243.35.58 was found in our database!

This IP was reported 210 times. Confidence of Abuse is 14%: ?

14%

ISP	ReliableSite.Net LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS23470
Hostname(s)	server22.afeeshost.com
Domain Name	reliablesite.net
Country	🇺🇸 United States of America
City	Piscataway, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.243.35.58

Whois 104.243.35.58

IP Abuse Reports for 104.243.35.58:

This IP address has been reported a total of 210 times from 67 distinct sources. 104.243.35.58 was first reported on February 22nd 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 cleanerweb	2026-07-08 13:19:00 (2 weeks ago)	This IP is being used by afeeshost.com who are a Nigerian 419 advanced fee fraud scam facilitating w ... show more This IP is being used by afeeshost.com who are a Nigerian 419 advanced fee fraud scam facilitating web host, they don't act on abuse reports and actively host scam sites for other Nigerian cyber criminals Name Servers: dns1.afeeshost.ltd dns2.afeeshost.ltd dns3.afeeshost.com Here are some of the scam sites: inteltrustfx.com maxdropassets.com noblex-markets.com show less	Phishing
🇨🇿 ptlab	2026-06-03 12:45:22 (1 month ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇺🇸 Victor López	2026-06-03 10:01:30 (1 month ago)	ads.buscaempresas.co 104.243.35.58 - - [03/Jun/2026:05:00:54 -0500] "GET /wp-login.php HTTP/2.0" 200 ... show more ads.buscaempresas.co 104.243.35.58 - - [03/Jun/2026:05:00:54 -0500] "GET /wp-login.php HTTP/2.0" 200 1862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" advisainternational.com 104.243.35.58 - - [03/Jun/2026:05:01:22 -0500] "GET /wp-login.php HTTP/2.0" 200 1862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" advisainternational.com 104.243.35.58 - - [03/Jun/2026:05:01:30 -0500] "POST /wp-login.php HTTP/2.0" 200 1992 "https://advisainternational.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 lostswordfish.com	2026-06-01 07:50:05 (1 month ago)	Wordfence waf block on parsol	Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 16:49:25 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 104.243.35.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 104.243.35.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 12:49:18.276513 2026] [security2:error] [pid 24571:tid 24571] [client 104.243.35.58:48394] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sharonmauldin.stardancertantra.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharonmauldin.stardancertantra.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahR9jslfyXCy_7r9QJPWFgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-05-25 08:02:02 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
Anonymous	2026-05-24 22:06:08 (2 months ago)	WordPress Brute Force	Brute-Force
🇫🇷 masterguru	2026-05-23 18:21:00 (2 months ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 104.243.35.58 (US/United States/-): 1 in the ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 104.243.35.58 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
Anonymous	2025-11-16 22:49:34 (8 months ago)	botnet	DDoS Attack
🇳🇱 exxos	2025-10-11 11:03:01 (9 months ago)	Attacks with Bad user agents	Hacking
🇭🇰 Shivakumar Gurumurthy	2024-03-02 18:34:25 (2 years ago)	2024-02-27 21:59:10,498 fail2ban.actions [336505]: NOTICE [sshd] Ban 104.243.35.58 2024-02-2 ... show more 2024-02-27 21:59:10,498 fail2ban.actions [336505]: NOTICE [sshd] Ban 104.243.35.58 2024-02-27 17:54:31,477 fail2ban.actions [336505]: NOTICE [sshd] Ban 104.243.35.58 2024-02-27 21:59:10,498 fail2ban.actions [336505]: NOTICE [sshd] Ban 104.243.35.58 ... show less	Brute-Force SSH
🇮🇸 www.fransveldman.world	2024-03-01 00:23:58 (2 years ago)	Mar 1 00:22:35 ice1 sshd[29934]: Invalid user srv from 104.243.35.58 port 56216 Mar 1 00:23:58 ice ... show more Mar 1 00:22:35 ice1 sshd[29934]: Invalid user srv from 104.243.35.58 port 56216 Mar 1 00:23:58 ice1 sshd[29969]: Invalid user controlm from 104.243.35.58 port 58092 ... show less	Brute-Force SSH
🇩🇪 bytepirate	2024-03-01 00:12:08 (2 years ago)	Mar 1 01:12:04 santamaria sshd\[19986\]: Invalid user sysadmin from 104.243.35.58 Mar 1 01:12:04 s ... show more Mar 1 01:12:04 santamaria sshd\[19986\]: Invalid user sysadmin from 104.243.35.58 Mar 1 01:12:04 santamaria sshd\[19986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.243.35.58 Mar 1 01:12:06 santamaria sshd\[19986\]: Failed password for invalid user sysadmin from 104.243.35.58 port 38000 ssh2 ... show less	Brute-Force SSH
🇮🇸 www.fransveldman.world	2024-02-29 23:50:44 (2 years ago)	Feb 29 23:46:54 ice1 sshd[29304]: Invalid user hadoop from 104.243.35.58 port 33854 Feb 29 23:50:44 ... show more Feb 29 23:46:54 ice1 sshd[29304]: Invalid user hadoop from 104.243.35.58 port 33854 Feb 29 23:50:44 ice1 sshd[29376]: Invalid user clamav from 104.243.35.58 port 39964 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2024-02-29 23:20:19 (2 years ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH

Showing 1 to 15 of 210 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.78

🇳🇱 193.176.31.203

🇫🇮 147.185.133.183

🇬🇧 35.203.210.32

🇺🇸 2604:a880:400:d1:0:4:c255:c001

🇷🇺 176.211.16.208

🇺🇸 162.216.149.19

🇯🇵 160.251.139.91

🇸🇬 160.30.208.11

🇦🇫 149.54.40.222

🇻🇳 125.212.217.143

🇺🇸 103.143.10.140

🇳🇱 91.92.40.239

🇩🇪 79.220.110.143

🇵🇱 45.192.12.148

🇸🇬 43.134.236.36

🇬🇧 213.166.84.37

🇳🇱 172.211.56.214

🇨🇳 171.112.248.125

🇬🇧 81.19.219.218