JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.245.245.27

104.245.245.27 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 100%: ?

100%

ISP	QuadSpark IT Solutions Private Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201814
Domain Name	quadspark.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.245.245.27

Whois 104.245.245.27

IP Abuse Reports for 104.245.245.27:

This IP address has been reported a total of 59 times from 33 distinct sources. 104.245.245.27 was first reported on August 8th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 bps-statistics	2026-08-24 08:54:56 (2 hours ago)	WP Login Scan Activities: "2026-08-24T15:54:56.109+07:00" "/wp-login.php" "104.245.245.27" "Mozilla/ ... show more WP Login Scan Activities: "2026-08-24T15:54:56.109+07:00" "/wp-login.php" "104.245.245.27" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" show less	Web App Attack
🇮🇩 bps-statistics	2026-08-24 08:10:16 (2 hours ago)	WP Login Scan Activities: "2026-08-24T15:10:16.261+07:00" "/wp-login.php" "104.245.245.27" "Mozilla/ ... show more WP Login Scan Activities: "2026-08-24T15:10:16.261+07:00" "/wp-login.php" "104.245.245.27" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" show less	Web App Attack
🇬🇧 Bytemark	2026-08-24 07:24:19 (3 hours ago)	104.245.245.27 - - [24/Aug/2026:08:24:17 +0100] "GET /wp-login.php HTTP/1.1" 404 47 "http://xiaomi.e ... show more 104.245.245.27 - - [24/Aug/2026:08:24:17 +0100] "GET /wp-login.php HTTP/1.1" 404 47 "http://xiaomi.eu/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.245.245.27 - - [24/Aug/2026:08:24:17 +0100] "POST /wp-login.php HTTP/1.1" 404 47 "http://xiaomi.eu/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.245.245.27 - - [24/Aug/2026:08:24:18 +0100] "POST /wp-login.php HTTP/1.1" 404 47 "https://xiaomi.eu/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" show less	Brute-Force Web App Attack
🇮🇩 bps-statistics	2026-08-24 06:54:32 (4 hours ago)	WP Login Scan Activities: "2026-08-24T13:54:32.056+07:00" "/wp-login.php" "104.245.245.27" "Mozilla/ ... show more WP Login Scan Activities: "2026-08-24T13:54:32.056+07:00" "/wp-login.php" "104.245.245.27" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" show less	Web App Attack
🇮🇹 CoreTech srl	2026-08-24 06:38:56 (4 hours ago)	cloudlinux2 fail2ban: 2026-08-24 08:34:07,789 fail2ban.filter [1464]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-24 08:34:07,789 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 5.31.5.93 - 2026-08-24 08:34:07cloudlinux2 fail2ban: 2026-08-24 08:35:08,978 fail2ban.actions [1464]: NOTICE [plesk-wordpress] Ban 104.245.245.112cloudlinux2 fail2ban: 2026-08-24 08:35:06,915 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 104.245.245.112 - 2026-08-24 08:35:06cloudlinux2 fail2ban: 2026-08-24 08:35:02,994 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 104.245.245.112 - 2026-08-24 08:35:02cloudlinux2 fail2ban: 2026-08-24 08:35:08,980 fail2ban.filter [1464]: INFO [recidive] Found 104.245.245.112 - 2026-08-24 08:35:08cloudlinux2 fail2ban: 2026-08-24 08:35:08,433 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 104.245.245.112 - 2026-08-24 08:35:08cloudlinux2 fail2ban: 2026-08-24 08:35:40,236 fail2ban.filter [1464]: INFO [recidive] Found 104.245.245.27 - 2026-08-24 08:35:40cloudlinux2 fail2ban: 2026-08-24 08:35 show less	Web App Attack
🇩🇪 Vegascosmetics	2026-08-23 21:27:22 (13 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wp-login\.php (Match: /wp-login.php) show less	Hacking Exploited Host Web App Attack
Anonymous	2026-08-22 22:06:39 (1 day ago)	2026-08-22T22:06:39.073633+00:00 instance-20260804-1025 wordpress(netal.co)[335964]: Blocked user en ... show more 2026-08-22T22:06:39.073633+00:00 instance-20260804-1025 wordpress(netal.co)[335964]: Blocked user enumeration attempt from 104.245.245.27 ... show less	Web App Attack
🇧🇪 cmbplf	2026-08-22 17:04:04 (1 day ago)	24.671 requests from abuseipdb.com blacklisted IP (3mos2w4d)	Brute-Force Bad Web Bot
Anonymous	2026-08-22 16:24:47 (1 day ago)	2026-08-22T16:24:47.098267+00:00 instance-20260804-1025 wordpress(netal.co)[317376]: Blocked user en ... show more 2026-08-22T16:24:47.098267+00:00 instance-20260804-1025 wordpress(netal.co)[317376]: Blocked user enumeration attempt from 104.245.245.27 ... show less	Web App Attack
🇵🇱 Budyn	2026-08-22 14:57:12 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sweetpuddingtrap.xyz \| URI: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 ph	2026-08-22 14:53:46 (1 day ago)	Bad web bot attempting to run wp-login.php on non-WP site	Hacking Bad Web Bot Web App Attack
🇳🇱 MyGlobalFlowers	2026-08-22 09:25:13 (2 days ago)	Multiple WAF Violations	Web App Attack
🇨🇦 zXero	2026-08-22 09:11:05 (2 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 xxkodedxx	2026-08-21 18:34:22 (2 days ago)	[Zorvexus edge-defense] GET .env / WordPress honeypot probe Trigger: 1× honeypot-get in 10m window. ... show more [Zorvexus edge-defense] GET .env / WordPress honeypot probe Trigger: 1× honeypot-get in 10m window. Origin: PL / AS201814 MEVSPACE sp. z o.o. Active: 18:33:40→18:33:41 UTC Volume: 2 HTTP req, 1 honeypot probe(s) Bait taken: /wp-login.php Status mix: 200×1 301×1 UA: "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
Anonymous	2026-08-21 17:54:02 (2 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 191.107.182.219

🇧🇷 187.19.251.219

🇯🇴 176.29.113.73

🇫🇷 141.94.19.216

🇵🇰 117.20.30.210

🇮🇩 43.245.248.2

🇨🇳 221.195.124.50

🇺🇸 216.119.148.49

🇺🇸 205.169.144.100

🇺🇸 195.184.76.187

🇺🇸 192.241.137.62

🇦🇷 186.0.187.98

🇳🇱 172.94.9.169

🇬🇧 165.84.215.49

🇮🇳 152.57.111.109

🇰🇷 125.142.32.25

🇺🇸 104.223.92.220

🇳🇱 92.60.40.217

🇫🇷 85.217.140.40

🇩🇪 69.5.169.170