JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.243.245.61

104.243.245.61 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 49%: ?

49%

ISP	Secure Internet LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	pointtoserver.com
Country	🇲🇽 Mexico
City	Santiago de Queretaro, Queretaro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.243.245.61

Whois 104.243.245.61

IP Abuse Reports for 104.243.245.61:

This IP address has been reported a total of 24 times from 18 distinct sources. 104.243.245.61 was first reported on April 29th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-07-12 09:38:33 (17 hours ago)	Too many failed requests 104.243.245.61 - - [12/Jul/2026:11:37:21 +0200] "GET /wp-admin/index.php HT ... show more Too many failed requests 104.243.245.61 - - [12/Jul/2026:11:37:21 +0200] "GET /wp-admin/index.php HTTP/1.1" 404 153 "https://wiki.<REDACTED>/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" 104.243.245.61 - - [12/Jul/2026:11:37:25 +0200] "GET /wp-admin/index.php HTTP/1.1" 404 555 "https://wiki.<REDACTED>/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36" 104.243.245.61 - - [12/Jul/2026:11:37:30 +0200] "GET /wp-admin/index.php HTTP/1.1" 404 153 "https://wiki.<REDACTED>/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" 104.243.245.61 - - [12/Jul/2026:11:37:35 +0200] "GET /wp-admin/index.php HTTP/1.1" 404 555 "https://wiki.<REDACTED>/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537. ... show less	Web Spam Bad Web Bot
Anonymous	2026-07-12 00:10:02 (1 day ago)	[osotir.org] httpd-login-spray-site: sites=www.logosparakliseos.gr; logs=/var/log/httpd/domains/logo ... show more [osotir.org] httpd-login-spray-site: sites=www.logosparakliseos.gr; logs=/var/log/httpd/domains/logosparakliseos.gr.log; samples=site_wide=true \| distinct_ips=21 \| /wp-login.php show less	Hacking Web App Attack
🇫🇮 bittiguru.fi	2026-07-11 21:09:38 (1 day ago)	104.243.245.61 - [12/Jul/2026:00:08:59 +0300] "POST /wp-login.php HTTP/1.1" 404 23771 "https://www.h ... show more 104.243.245.61 - [12/Jul/2026:00:08:59 +0300] "POST /wp-login.php HTTP/1.1" 404 23771 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1" "3.37" 104.243.245.61 - [12/Jul/2026:00:09:10 +0300] "POST /wp-login.php HTTP/1.1" 404 23771 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0.2" "3.37" 104.243.245.61 - [12/Jul/2026:00:09:19 +0300] "POST /wp-login.php HTTP/1.1" 404 23771 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "3.37" 104.243.245.61 - [12/Jul/2026:00:09:28 +0300] "POST /wp-login.php HTTP/1.1" 404 23771 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0" "3.37" 104.243.245.61 - [12/Jul/2026:00:09:37 +0300] "POST /wp-login.php HTTP/1.1" 404 23771 "https://www.heikkinen.fi/wp- ... show less	Hacking Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-06-18 22:25:55 (3 weeks ago)		Brute-Force Web App Attack
Anonymous	2026-06-10 12:59:31 (1 month ago)	104.243.245.61 - - [10/Jun/2026:12:59:27 +0000] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" ... show more 104.243.245.61 - - [10/Jun/2026:12:59:27 +0000] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 302 588 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.61 - - [10/Jun/2026:12:59:27 +0000] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 302 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.61 - - [10/Jun/2026:12:59:27 +0000] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 302 600 "-" "M ... show less	Web App Attack
🇦🇺 2000cn.com.au	2026-06-08 10:27:00 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-08 07:55:31 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 104.243.245.61 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 104.243.245.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 03:55:24.038361 2026] [security2:error] [pid 26608:tid 26608] [client 104.243.245.61:55421] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.hkaida.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.hkaida.com"] [uri "/images/stories/themes.php"] [unique_id "aiZ1bEf2cW8bHEXo7PueYgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-06-08 03:16:35 (1 month ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇷🇺 sms.ru	2026-06-08 01:08:41 (1 month ago)	/wp-admin/js/autoload_classmap.php	Web App Attack
Anonymous	2026-06-08 00:07:40 (1 month ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: MX, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: MX, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-06-07 20:32:14 (1 month ago)	104.243.245.61 - - [07/Jun/2026:23:32:13 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 404 711 "-" ... show more 104.243.245.61 - - [07/Jun/2026:23:32:13 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 404 711 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.61 - - [07/Jun/2026:23:32:14 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 404 711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" ... show less	Web App Attack
🇬🇧 consul.to	2026-06-07 20:17:41 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Octopuce	2026-06-07 18:43:39 (1 month ago)	Aggressive web search of vulnerable pages: /bless.php /O-Simple.php /lock360.php /zwso.php /chosen.p ... show more Aggressive web search of vulnerable pages: /bless.php /O-Simple.php /lock360.php /zwso.php /chosen.php /about.php /admin.php /mah.php /.wp/wso. ... show less	Web App Attack
🇬🇧 consul.to	2026-06-06 18:13:40 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇿 Antinson	2026-06-03 14:37:47 (1 month ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:fb5::251

🇧🇷 201.63.223.138

🇬🇧 185.247.137.201

🇨🇴 179.49.160.124

🇺🇸 165.154.163.10

🇺🇸 162.216.150.98

🇮🇳 115.245.122.146

🇺🇸 100.50.17.159

🇺🇸 81.30.98.193

🇲🇾 49.124.146.45

🇮🇹 37.181.202.95

🇩🇪 213.209.159.231

🇮🇶 176.241.83.187

🇫🇮 172.253.83.222

🇸🇪 171.25.158.82

🇹🇭 159.192.137.133

🇨🇳 125.121.227.123

🇮🇳 117.252.165.178

🇸🇪 104.243.197.55

🇧🇬 79.124.49.114