JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.245.129.42

109.245.129.42 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 86%: ?

86%

ISP	Cetin doo Serbia fixed-mobile access to the Internet
Usage Type	Fixed Line ISP
ASN	AS15958
Hostname(s)	net42-129-245-109.dynamic.mbb.yettel.rs
Domain Name	cetin.rs
Country	🇷🇸 Serbia
City	Belgrade, Central Serbia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.245.129.42

Whois 109.245.129.42

IP Abuse Reports for 109.245.129.42:

This IP address has been reported a total of 24 times from 15 distinct sources. 109.245.129.42 was first reported on July 6th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-11 18:51:32 (10 hours ago)	(mod_security) mod_security (id:240335) triggered by 109.245.129.42 (net42-129-245-109.dynamic.mbb.y ... show more (mod_security) mod_security (id:240335) triggered by 109.245.129.42 (net42-129-245-109.dynamic.mbb.yettel.rs): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 14:51:25.389990 2026] [security2:error] [pid 4011:tid 4011] [client 109.245.129.42:56347] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.245.129.42 (+1 hits since last alert)\|calvaryadminservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "calvaryadminservices.com"] [uri "/xmlrpc.php"] [unique_id "alKQraTwRvQC6yziWamQNwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-11 00:31:15 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-11 00:01:09 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 109.245.129.42 (net42-129-245-109.dynamic.mbb.y ... show more (mod_security) mod_security (id:240335) triggered by 109.245.129.42 (net42-129-245-109.dynamic.mbb.yettel.rs): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 20:01:01.497980 2026] [security2:error] [pid 30998:tid 30998] [client 109.245.129.42:52924] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.245.129.42 (+1 hits since last alert)\|innolympics.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "innolympics.com"] [uri "/xmlrpc.php"] [unique_id "alGHvY4uC60tZfD4GvzJmAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-11 00:00:34 (1 day ago)	(wordpress) Failed wordpress login from 109.245.129.42 (RS/Serbia/net42-129-245-109.dynamic.mbb.yett ... show more (wordpress) Failed wordpress login from 109.245.129.42 (RS/Serbia/net42-129-245-109.dynamic.mbb.yettel.rs) show less	Brute-Force
🇫🇷 dynamix	2026-07-10 20:24:25 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇪🇸 masterguru	2026-07-10 19:55:55 (1 day ago)	(xmlrpc) Failed xmlrpc access from 109.245.129.42 (RS/Serbia/net42-129-245-109.dynamic.mbb.yettel.rs ... show more (xmlrpc) Failed xmlrpc access from 109.245.129.42 (RS/Serbia/net42-129-245-109.dynamic.mbb.yettel.rs): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-09 23:53:42 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 109.245.129.42 (net42-129-245-109.dynamic.mbb.y ... show more (mod_security) mod_security (id:240335) triggered by 109.245.129.42 (net42-129-245-109.dynamic.mbb.yettel.rs): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 19:53:37.495016 2026] [security2:error] [pid 16745:tid 16745] [client 109.245.129.42:53655] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.245.129.42 (+1 hits since last alert)\|qed-consulting.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "qed-consulting.co"] [uri "/xmlrpc.php"] [unique_id "alA0gZoY_hvfTkFtZQ4CtgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-09 20:45:14 (2 days ago)	[redacted] 109.245.129.42 - - [09/Jul/2026:22:44:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 109.245.129.42 - - [09/Jul/2026:22:44:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 109.245.129.42 - - [09/Jul/2026:22:44:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 109.245.129.42 - - [09/Jul/2026:22:44:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site63571898.com" [redacted] 109.245.129.42 - - [09/Jul/2026:22:45:02 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" [redacted] 109.245.129.42 - - [09/Jul/2026:22:45:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.2; http://site54102897.com" ... show less	Hacking Web App Attack
🇩🇪 konseptit	2026-07-09 12:46:16 (2 days ago)	(wordpress) Failed wordpress login from 109.245.129.42 (RS/Serbia/net42-129-245-109.dynamic.mbb.yett ... show more (wordpress) Failed wordpress login from 109.245.129.42 (RS/Serbia/net42-129-245-109.dynamic.mbb.yettel.rs) show less	Brute-Force
🇺🇸 WeekendWeb	2026-07-08 22:55:04 (3 days ago)	Wordpress Vunerability attack	Web App Attack
Anonymous	2026-07-08 21:53:12 (3 days ago)	(wordpress) Failed wordpress login from 109.245.129.42 (RS/Serbia/net42-129-245-109.dynamic.mbb.yett ... show more (wordpress) Failed wordpress login from 109.245.129.42 (RS/Serbia/net42-129-245-109.dynamic.mbb.yettel.rs) show less	Brute-Force
🇫🇷 applemooz	2026-07-08 21:22:59 (3 days ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 19:52:25 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 109.245.129.42 (net42-129-245-109.dynamic.mbb.y ... show more (mod_security) mod_security (id:240335) triggered by 109.245.129.42 (net42-129-245-109.dynamic.mbb.yettel.rs): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 15:52:16.831728 2026] [security2:error] [pid 30927:tid 30927] [client 109.245.129.42:49958] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.245.129.42 (+1 hits since last alert)\|silalaw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "silalaw.com"] [uri "/xmlrpc.php"] [unique_id "ak6qcDHpb1r3WsK6QC_k-QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-08 14:22:01 (3 days ago)	(wordpress) Failed wordpress login from 109.245.129.42 (RS/Serbia/net42-129-245-109.dynamic.mbb.yett ... show more (wordpress) Failed wordpress login from 109.245.129.42 (RS/Serbia/net42-129-245-109.dynamic.mbb.yettel.rs) show less	Brute-Force
🇫🇷 dynamix	2026-07-08 11:44:46 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 206.183.111.36

🇺🇸 205.210.31.70

🇻🇳 123.58.198.35

🇰🇷 119.28.151.189

🇺🇸 107.150.103.155

🇺🇸 74.63.17.234

🇩🇪 69.5.169.100

🇩🇪 69.5.169.71

🇩🇪 69.5.169.10

🇺🇸 66.132.195.114

🇻🇳 45.122.242.218

🇺🇸 179.61.232.244

🇧🇷 168.197.238.146

🇷🇺 109.202.53.157

🇺🇸 104.207.45.199

🇺🇸 104.207.39.163

🇺🇸 104.207.39.87

🇺🇸 104.207.32.235

🇳🇱 91.92.42.63

🇳🇱 88.210.63.69