This IP address has been reported a total of
104
times from
64 distinct
sources.
104.245.245.15 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026/09/19 04:32:34 [error] 1402401#1402401: *3755721 FastCGI sent in stderr: "Primary script unknow ...
show more2026/09/19 04:32:34 [error] 1402401#1402401: *3755721 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.245.245.15, server: kocerroxy.com, request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
104.245.245.15 - - [19/Sep/2026:04:32:34 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
2026/09/19 04:32:36 [error] 1402401#1402401: *3755721 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.245.245.15, server: kocerroxy.com, request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
104.245.245.15 - - [19/Sep/2026:04:32:36 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap
...
show less
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /administrator/index.php HTTP/1.1, GET /?rest_route=/wp/ ...
show moreBot / scanning and/or hacking attempts: GET /administrator/index.php HTTP/1.1, GET /?rest_route=/wp/v2/users HTTP/1.1, POST /wp-login.php HTTP/1.1, GET /wp-json/wp/v2/users HTTP/1.1, GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.rat-holland.nl%, GET /?author=8 HTTP/1.1, GET /wp-json/wp/v2/users/me HTTP/1.1, POST /wp-login.php?redirect_to=https%3A%2F%2Fwww.rat-holland.nl, GET /?author=2 HTTP/1.1, GET /?author=6 HTTP/1.1, GET /wp-admin/ HTTP/1.1
show less
Triggered Cloudflare WAF from PL.
Action taken: BLOCK
ASN: 201814 (MEVSPACE sp. z o.o.)
Protocol: HT ...
show moreTriggered Cloudflare WAF from PL.
Action taken: BLOCK
ASN: 201814 (MEVSPACE sp. z o.o.)
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-login.php
Timestamp: 2026-09-17T17:15:04Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36
show less
Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. / ...
show moreAutomated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. /wp-login.php
show less
Web App Attack
Hacking
Anonymous
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Showing 1 to
15
of 104 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩