JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

112.134.104.39

Neutral Activity

Abuse confidence score ?

0% Low Risk

17 reports

9 reporters · latest 4 months ago

ISP	Internet Service Provider in Sri Lanka.
Usage Type	Fixed Line ISP
ASN	AS9329
Hostname(s)	v4.dns.slt.lk
Domain Name	sltnet.lk
Country	🇱🇰 Sri Lanka
City	Negombo, Western Province

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

112.134.104.39 has been reported 17 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 112.134.104.39

This IP address has been reported a total of 17 times from 9 distinct sources. 112.134.104.39 was first reported on April 22nd 2025, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Gmtekai	2026-05-18 04:10:40 (4 months ago)	WordPress credential-stuffing attack against wp-login.php and REST API user enumeration (wp-json/wp/ ... show more WordPress credential-stuffing attack against wp-login.php and REST API user enumeration (wp-json/wp/v2/users). Distributed botnet hit cantrellmotorsport.com 2026-05-17. One successful breach of admin account (separately contained). Categories 18+21. Reported by GMTek AI. show less	Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-04-30 20:06:22 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-04-30 00:06:21 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 SpaceHost-Server	2025-04-29 22:25:28 (1 year ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-04-29 20:06:21 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 SpaceHost-Server	2025-04-28 22:25:20 (1 year ago)		Brute-Force Web App Attack
Anonymous	2025-04-28 17:30:50 (1 year ago)	112.134.104.39 - - [28/Apr/2025:19:30:48 +0200] "POST /xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 ... show more 112.134.104.39 - - [28/Apr/2025:19:30:48 +0200] "POST /xmlrpc.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	Web App Attack
Anonymous	2025-04-26 01:00:34 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 vestibtech	2025-04-25 08:15:21 (1 year ago)	112.134.104.39 - - [25/Apr/2025:02:15:20 -0600] "POST /xmlrpc.php HTTP/1.1" 404 10529 "-" "Mozilla/5 ... show more 112.134.104.39 - - [25/Apr/2025:02:15:20 -0600] "POST /xmlrpc.php HTTP/1.1" 404 10529 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Web App Attack
🇩🇪 stinpriza	2025-04-25 07:42:31 (1 year ago)	(XMLRPC) xmlrpc banned 112.134.104.39 (LK/Sri Lanka/v4.dns.slt.lk): 1 in the last 3600 secs	Web App Attack
Anonymous	2025-04-25 00:59:02 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-04-25 00:12:23 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 112.134.104.39 (v4.dns.slt.lk): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 112.134.104.39 (v4.dns.slt.lk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 24 20:12:16.784902 2025] [security2:error] [pid 2745994:tid 2745994] [client 112.134.104.39:20727] [client 112.134.104.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bronislawsuchanek.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bronislawsuchanek.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aArTYAmNrWrCFcYkSLYUAAAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-23 02:17:34 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-04-22 08:07:54 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 112.134.104.39 (v4.dns.slt.lk): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 112.134.104.39 (v4.dns.slt.lk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 04:07:45.335444 2025] [security2:error] [pid 25858:tid 25858] [client 112.134.104.39:20141] [client 112.134.104.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|save1vet.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "save1vet.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aAdOUXp8juKwUyV4mntNPgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-22 02:47:34 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 112.134.104.39 (v4.dns.slt.lk): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 112.134.104.39 (v4.dns.slt.lk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 22:47:27.356185 2025] [security2:error] [pid 31122:tid 31122] [client 112.134.104.39:19417] [client 112.134.104.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|famagustacyprus.eu\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "famagustacyprus.eu"] [uri "/wp-json/wp/v2/users"] [unique_id "aAcDP2ze2TOxwXVmwHfQ2gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇻 213.176.24.46

🇬🇧 193.163.125.120

🇳🇱 94.154.43.57

🇺🇸 64.23.175.30

🇷🇺 31.13.19.104

🇳🇱 193.176.31.199

🇧🇷 189.45.16.27

🇳🇱 93.123.109.167

🇺🇸 64.62.197.184

🇨🇦 51.222.83.202

🇺🇸 43.130.100.35

🇻🇳 42.96.20.16

🇺🇸 4.148.240.176

🇨🇳 1.83.221.29

🇰🇷 222.116.59.127

🇺🇸 216.25.89.92

🇲🇾 203.121.40.210

🇨🇱 200.27.142.120

🇸🇪 104.28.151.110

🇸🇪 104.23.217.24