AbuseIPDB » 5.42.104.244

5.42.104.244 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 82%: ?

82%

ISP	Aeza International LTD
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vpnmorissons.aeza.network
Domain Name	aeza.net
Country	France
City	Le Kremlin-Bicetre, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 5.42.104.244

Whois 5.42.104.244

IP Abuse Reports for 5.42.104.244:

This IP address has been reported a total of 41 times from 20 distinct sources. 5.42.104.244 was first reported on September 20th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2024-09-22 20:54:24 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-09-22 00:54:25 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-09-21 20:54:26 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
polycoda	2024-09-20 18:41:53 (2 weeks ago)	🔑 Wordpress login brute force attempt	Hacking Web App Attack
bittiguru.fi	2024-09-20 16:14:48 (2 weeks ago)	5.42.104.244 - [20/Sep/2024:19:14:46 +0300] "POST /xmlrpc.php HTTP/1.1" 200 143 "-" "Apache-HttpClie ... show more5.42.104.244 - [20/Sep/2024:19:14:46 +0300] "POST /xmlrpc.php HTTP/1.1" 200 143 "-" "Apache-HttpClient/4.5.13 (Java/11.0.24)" "1.37" 5.42.104.244 - [20/Sep/2024:19:14:48 +0300] "POST /xmlrpc.php HTTP/1.1" 503 18966 "-" "Apache-HttpClient/4.5.13 (Java/11.0.24)" "-" ... show less	Hacking Brute-Force Web App Attack
sverson	2024-09-20 15:27:44 (2 weeks ago)	Automated report / Unauthorized login attempts	Hacking Brute-Force
juutis	2024-09-20 15:10:59 (2 weeks ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
Anonymous	2024-09-20 14:24:18 (2 weeks ago)	apache-wordpress-login	Brute-Force Web App Attack
SpaceHost-Server	2024-09-20 14:18:45 (2 weeks ago)	5.42.104.244 - - [20/Sep/2024:16:18:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 917 "-" "Apache-HttpCl ... show more5.42.104.244 - - [20/Sep/2024:16:18:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 917 "-" "Apache-HttpClient/4.5.13 (Java/11.0.24)" 5.42.104.244 - - [20/Sep/2024:16:18:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 1143 "-" "Apache-HttpClient/4.5.13 (Java/11.0.24)" 5.42.104.244 - - [20/Sep/2024:16:18:43 +0200] "POST /wp-login.php HTTP/1.1" 200 9756 "https://marienschule-schwagstorf.de/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Hacking Web App Attack
bittiguru.fi	2024-09-20 14:11:20 (2 weeks ago)	5.42.104.244 - [20/Sep/2024:17:05:11 +0300] "POST /xmlrpc.php HTTP/1.1" 404 22670 "-" "Apache-HttpCl ... show more5.42.104.244 - [20/Sep/2024:17:05:11 +0300] "POST /xmlrpc.php HTTP/1.1" 404 22670 "-" "Apache-HttpClient/4.5.13 (Java/11.0.24)" "4.70" 5.42.104.244 - [20/Sep/2024:17:11:19 +0300] "POST /xmlrpc.php HTTP/1.1" 404 22670 "-" "Apache-HttpClient/4.5.13 (Java/11.0.24)" "4.70" ... show less	Hacking Brute-Force Web App Attack
akcurate.de	2024-09-20 14:07:55 (2 weeks ago)	[Fri Sep 20 16:07:53.981101 2024] [authz_core:error] [pid 2320:tid 2521] [client 5.42.104.244:60542] ... show more[Fri Sep 20 16:07:53.981101 2024] [authz_core:error] [pid 2320:tid 2521] [client 5.42.104.244:60542] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: https://www.google.com [Fri Sep 20 16:07:54.028459 2024] [authz_core:error] [pid 2318:tid 2478] [client 5.42.104.244:60558] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: https://www.google.com ... show less	Brute-Force Web App Attack
TPI-Abuse	2024-09-20 13:49:37 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 5.42.104.244 (smart-collar.aeza.network): 1 in ... show more(mod_security) mod_security (id:225170) triggered by 5.42.104.244 (smart-collar.aeza.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 20 09:49:30.992607 2024] [security2:error] [pid 19180:tid 19180] [client 5.42.104.244:57520] [client 5.42.104.244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|blacksheepoffroad.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blacksheepoffroad.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Zu19ajUomaPpODzjYaThIQAAAAM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
kernel-error.de	2024-09-20 13:05:12 (2 weeks ago)	::ffff:5.42.104.244 - - [20/Sep/2024:14:56:01 +0200] "GET /wp-login.php HTTP/1.1" 404 10466 "https:/ ... show more::ffff:5.42.104.244 - - [20/Sep/2024:14:56:01 +0200] "GET /wp-login.php HTTP/1.1" 404 10466 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ::ffff:5.42.104.244 - - [20/Sep/2024:14:56:01 +0200] "GET /wp-login.php HTTP/1.1" 404 10466 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ::ffff:5.42.104.244 - - [20/Sep/2024:15:05:11 +0200] "GET /wp-login.php HTTP/1.1" 404 10466 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
bittiguru.fi	2024-09-20 12:59:28 (2 weeks ago)	5.42.104.244 - [20/Sep/2024:15:59:25 +0300] "POST /xmlrpc.php HTTP/1.1" 200 143 "-" "Apache-HttpClie ... show more5.42.104.244 - [20/Sep/2024:15:59:25 +0300] "POST /xmlrpc.php HTTP/1.1" 200 143 "-" "Apache-HttpClient/4.5.13 (Java/11.0.24)" "1.37" 5.42.104.244 - [20/Sep/2024:15:59:27 +0300] "POST /xmlrpc.php HTTP/1.1" 503 18966 "-" "Apache-HttpClient/4.5.13 (Java/11.0.24)" "-" ... show less	Hacking Brute-Force Web App Attack
akcurate.de	2024-09-20 12:50:54 (2 weeks ago)	[Fri Sep 20 14:50:53.170781 2024] [authz_core:error] [pid 2765:tid 2822] [client 5.42.104.244:52474] ... show more[Fri Sep 20 14:50:53.170781 2024] [authz_core:error] [pid 2765:tid 2822] [client 5.42.104.244:52474] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: https://www.google.com [Fri Sep 20 14:50:53.224149 2024] [authz_core:error] [pid 2765:tid 2815] [client 5.42.104.244:52488] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: https://www.google.com ... show less	Brute-Force Web App Attack