JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.245.245.166

104.245.245.166 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 56%: ?

56%

ISP	QuadSpark IT Solutions Private Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201814
Domain Name	quadspark.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.245.245.166

Whois 104.245.245.166

IP Abuse Reports for 104.245.245.166:

This IP address has been reported a total of 11 times from 9 distinct sources. 104.245.245.166 was first reported on June 19th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 SOC PR	2026-06-20 09:58:27 (2 hours ago)	IPS: WordPress HTTP Brute Force Login Attempt.	Brute-Force
🇲🇹 Malta	2026-06-20 08:44:57 (3 hours ago)	104.245.245.166 - - [20/Jun/2026:10:44:57 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 104.245.245.166 - - [20/Jun/2026:10:44:57 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" show less	Hacking Web App Attack
🇬🇧 Bytemark	2026-06-20 08:33:43 (3 hours ago)	104.245.245.166 - - [20/Jun/2026:09:33:41 +0100] "GET /wp-login.php HTTP/1.1" 404 47 "http://xiaomi. ... show more 104.245.245.166 - - [20/Jun/2026:09:33:41 +0100] "GET /wp-login.php HTTP/1.1" 404 47 "http://xiaomi.eu/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.245.245.166 - - [20/Jun/2026:09:33:41 +0100] "POST /wp-login.php HTTP/1.1" 404 47 "http://xiaomi.eu/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.245.245.166 - - [20/Jun/2026:09:33:43 +0100] "POST /wp-login.php HTTP/1.1" 404 47 "https://xiaomi.eu/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" show less	Brute-Force Web App Attack
🇺🇸 monn45888	2026-06-20 07:53:15 (4 hours ago)	$f2bV_matches	Web App Attack
🇺🇸 helios.live	2026-06-20 07:45:31 (4 hours ago)	2026/06/20 07:45:28 [error] 1161118#1161118: 1521139 FastCGI sent in stderr: "Primary script unknow ... show more 2026/06/20 07:45:28 [error] 1161118#1161118: 1521139 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.245.245.166, server: kocerroxy.com, request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/wp-admin/" 104.245.245.166 - - [20/Jun/2026:07:45:28 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "http://app.kocerroxy.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 2026/06/20 07:45:28 [error] 1161118#1161118: *1521139 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.245.245.166, server: kocerroxy.com, request: "POST /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/wp- ... show less	Web App Attack
🇲🇽 octageeks.com	2026-06-20 04:07:26 (8 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 london2038.com	2026-06-19 07:44:43 (1 day ago)	Malformed or malicious web request 104.245.245.166 - - [19/Jun/2026:09:44:42 +0200] "POST /wp-login. ... show more Malformed or malicious web request 104.245.245.166 - - [19/Jun/2026:09:44:42 +0200] "POST /wp-login.php HTTP/1.1" 404 4187 "http://account.<REDACTED>/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 helios.live	2026-06-19 07:33:59 (1 day ago)	2026/06/19 07:33:54 [error] 1016516#1016516: 1399070 FastCGI sent in stderr: "Primary script unknow ... show more 2026/06/19 07:33:54 [error] 1016516#1016516: 1399070 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.245.245.166, server: kocerroxy.com, request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com", referrer: "http://kocerroxy.com/wp-admin/" 104.245.245.166 - - [19/Jun/2026:07:33:54 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "http://kocerroxy.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 2026/06/19 07:33:54 [error] 1016516#1016516: *1399070 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.245.245.166, server: kocerroxy.com, request: "POST /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com", referrer: "http://kocerroxy.com/wp-admin/" 104.245.245. ... show less	Web App Attack
🇩🇪 MusicLibrary	2026-06-19 07:25:30 (1 day ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇫🇷 Lunix	2026-06-19 07:18:27 (1 day ago)		Brute-Force Web App Attack
🇲🇹 Malta	2026-06-19 07:02:29 (1 day ago)	104.245.245.166 - - [19/Jun/2026:09:02:29 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 104.245.245.166 - - [19/Jun/2026:09:02:29 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" show less	Hacking Web App Attack VPN IP

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.22.5.144

🇨🇿 77.237.158.44

🇹🇭 203.154.158.195

🇺🇸 95.173.221.189

🇱🇹 81.30.98.142

🇻🇳 36.50.134.129

🇬🇧 35.203.210.85

🇻🇪 200.71.154.142

🇨🇦 142.93.158.243

🇨🇳 140.246.137.102

🇨🇳 106.75.144.128

🇨🇳 101.200.91.165

🇷🇴 92.118.39.234

🇻🇳 203.205.37.233

🇲🇽 189.203.163.10

🇳🇱 176.65.139.56

🇵🇰 175.107.233.255

🇹🇼 172.69.221.71

🇹🇳 102.152.22.25

🇳🇱 91.92.40.204