AbuseIPDB » 104.244.75.243

104.244.75.243 was found in our database!

This IP was reported 600 times. Confidence of Abuse is 70%: ?

70%

ISP	BuyVM
Usage Type	Data Center/Web Hosting/Transit
Domain Name	buyvm.net
Country	Luxembourg
City	Luxembourg, Luxembourg

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 104.244.75.243

Whois 104.244.75.243

IP Abuse Reports for 104.244.75.243:

This IP address has been reported a total of 600 times from 188 distinct sources. 104.244.75.243 was first reported on November 9th 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp	Comment	Categories
factor1	2023-11-16 21:23:55 (2 weeks ago)	Fail2ban at saturn Reports Abuse.	Brute-Force Web App Attack
Tha_14	2023-11-16 03:58:48 (2 weeks ago)	Attempt to log in with non-existing username: plesk_administrator	Bad Web Bot
factor1	2023-11-15 17:53:47 (2 weeks ago)	Fail2ban at saturn Reports Abuse.	Brute-Force Web App Attack
MAGIC	2023-11-14 11:02:44 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
KIsmay	2023-11-14 02:19:18 (2 weeks ago)	Nov 13 19:02:31 www4 WPAudit[2216665]: 104.244.75.243 goldislandforestproducts.ca "Mozilla/5.0 (Wind ... show moreNov 13 19:02:31 www4 WPAudit[2216665]: 104.244.75.243 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 5.1; rv:30.0) Gecko/20100101 Firefox/30.0" gifp:gifp123!@# FAIL Nov 13 19:22:20 www4 WPAudit[2217851]: 104.244.75.243 www.simonsgaragedoors.com "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0" sbd-admin:sbd-admin123!@# FAIL Nov 13 19:39:55 www4 WPAudit[2218781]: 104.244.75.243 hanleyandsonconstruction.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:31.0) Gecko/20100101 Firefox/31.0" hns:hns123!@# FAIL Nov 13 20:57:12 www4 WPAudit[2222539]: 104.244.75.243 bcadjuster.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:31.0) Gecko/20100101 Firefox/31.0" sbd-admin:sbd-admin123!@# FAIL Nov 13 21:19:17 www4 WPAudit[2223680]: 104.244.75.243 www.bcadjuster.com "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" doug:doug123!@# FAIL ... show less	Brute-Force Web App Attack
pusathosting.com	2023-11-13 11:30:07 (3 weeks ago)	2ds22 bruteforce	Brute-Force Web App Attack
Birdflew	2023-11-12 19:24:17 (3 weeks ago)	Wordpress attack	Web App Attack
Nowest	2023-11-11 02:35:39 (3 weeks ago)	Attempt to access admin/ \| Ignores robots.txt \| User agent: python-requests/2.27.1	Bad Web Bot Web App Attack
4server	2023-11-09 19:24:04 (3 weeks ago)	[ThuNov0920:24:01.1061682023][security2:error][pid21700:tid47066025875200][client104.244.75.243:0][c ... show more[ThuNov0920:24:01.1061682023][security2:error][pid21700:tid47066025875200][client104.244.75.243:0][client104.244.75.243]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"187\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITICAL\"][hostname\"comarcosa.com\"][uri\"/wp-admin/plugin-install.php\"][unique_id\"ZU0x0cmvPIlfaE3fUEorTQAAAI0\"][ThuNov0920:24:01.1515872023][security2:error][pid21700:tid47066013267712][client104.244.75.243:0][client104.244.75.243]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"187\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][sev show less	Blog Spam
ozisp.com.au	2023-11-06 23:25:12 (3 weeks ago)	US_FranTech BuyVM_<33>1699313111 [1:2012843:2] ET POLICY Cleartext WordPress Login [Classifica ... show moreUS_FranTech BuyVM_<33>1699313111 [1:2012843:2] ET POLICY Cleartext WordPress Login [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 104.244.75.243:57848 show less	Hacking
francoisunix	2023-11-06 01:14:39 (4 weeks ago)	104.244.75.243 - - [06/Nov/2023:01:14:35 +0000] "GET //wp-login.php HTTP/1.1" 401 8890 "-" "Mozilla/ ... show more104.244.75.243 - - [06/Nov/2023:01:14:35 +0000] "GET //wp-login.php HTTP/1.1" 401 8890 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0" 104.244.75.243 - - [06/Nov/2023:01:14:36 +0000] "GET //wp-login.php HTTP/1.1" 401 8890 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0" 104.244.75.243 - - [06/Nov/2023:01:14:37 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.eco-conscient.com%2F%2Fwp-admin%2Fplugin-install.php%3Ftab%3Dupload&reauth=1 HTTP/1.1" 401 9052 "-" "python-requests/2.27.1" show less	Web App Attack
archiv-pm	2023-11-05 01:32:04 (4 weeks ago)	Wordpress login attempts	Brute-Force
KIsmay	2023-11-03 22:21:57 (1 month ago)	Nov 3 14:10:38 www4 WPAudit[1287580]: 104.244.75.243 www.imaginesalmon.com "Mozilla/5.0 (X11; Linux ... show moreNov 3 14:10:38 www4 WPAudit[1287580]: 104.244.75.243 www.imaginesalmon.com "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36" se7enoaks:Se7enoaks!@#123 FAIL Nov 3 14:29:10 www4 WPAudit[1289341]: 104.244.75.243 vhsport.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.74.9 (KHTML, like Gecko) Version/7.0.2 Safari/537.74.9" sbd-admin:vhsport2022 FAIL Nov 3 17:55:50 www4 WPAudit[1232039]: 104.244.75.243 valhallasafety.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:30.0) Gecko/20100101 Firefox/30.0" wordpress_administrator:wordpress_administrator FAIL Nov 3 18:05:02 www4 WPAudit[1303035]: 104.244.75.243 simonsgaragedoors.com "Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0" sbd-admin:simonsgaragedoors2022 FAIL Nov 3 18:21:56 www4 WPAudit[1303978]: 104.244.75.243 www.bestnelson.org "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" be ... show less	Brute-Force Web App Attack
TZNOC	2023-11-03 22:21:44 (1 month ago)	Brute Force Attack on a Web Application #8	DDoS Attack Web Spam Brute-Force Web App Attack
mnsf	2023-11-03 22:06:16 (1 month ago)	Login Too Frequent (6)	Brute-Force Web App Attack