This IP address has been reported a total of
6
times from
5 distinct
sources.
104.248.221.184 was first reported on
October 14th 2026 , and the most recent report was
40 minutes ago Switzerland
with 2
reports;
United Kingdom of Great Britain and Northern Ireland
with 1
report;
Netherlands
with 1
report.
The most common categories in these recent reports were:
Web App Attack
5
times;
Bad Web Bot
1
time;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
Origon
2026-10-21 00:26:37
(40 minutes ago)
recidive - IP: 104.248.221.184 - 2026-10-14 04:55:19,950 fail2ban.actions [3856860]: NOTICE [plesk- ...
show more
recidive - IP: 104.248.221.184 - 2026-10-14 04:55:19,950 fail2ban.actions [3856860]: NOTICE [plesk-wordpress] Ban 104.248.221.184 2026-10-14 05:42:55,330 fail2ban.actions [3856860]: NOTICE [plesk-wordpress] Ban 104.248.221.184 2026-10-14 06:26:06,565 fail2ban.actions [3856860]: NOTICE [plesk-wordpress] Ban 104.248.221.184
show less
Web App Attack
🇨🇭
Origon
2026-10-14 04:26:07
(6 days ago)
recidive - IP: 104.248.221.184 - 2026-10-14 04:55:19,950 fail2ban.actions [3856860]: NOTICE [plesk- ...
show more
recidive - IP: 104.248.221.184 - 2026-10-14 04:55:19,950 fail2ban.actions [3856860]: NOTICE [plesk-wordpress] Ban 104.248.221.184 2026-10-14 05:42:55,330 fail2ban.actions [3856860]: NOTICE [plesk-wordpress] Ban 104.248.221.184 2026-10-14 06:26:06,565 fail2ban.actions [3856860]: NOTICE [plesk-wordpress] Ban 104.248.221.184
show less
Web App Attack
🇳🇱
maxxsense
2026-10-14 03:09:07
(6 days ago)
(wordpress) Failed wordpress login from 104.248.221.184 (US/United States/-)
Brute-Force
🇺🇸
IndigoRidge
2026-10-14 02:59:44
(6 days ago)
104.248.221.184 - - [13/Oct/2026:22:51:47 -0400] "POST /wp-login.php HTTP/1.1" 200 13029 "-" "Mozill ...
show more
104.248.221.184 - - [13/Oct/2026:22:51:47 -0400] "POST /wp-login.php HTTP/1.1" 200 13029 "-" "Mozilla/5.0"
104.248.221.184 - - [13/Oct/2026:22:51:47 -0400] "POST /wp-login.php HTTP/1.1" 200 13065 "-" "Mozilla/5.0"
104.248.221.184 - - [13/Oct/2026:22:55:18 -0400] "POST /wp-login.php HTTP/1.1" 200 13029 "-" "Mozilla/5.0"
104.248.221.184 - - [13/Oct/2026:22:55:18 -0400] "POST /wp-login.php HTTP/1.1" 200 13065 "-" "Mozilla/5.0"
104.248.221.184 - - [13/Oct/2026:22:59:43 -0400] "POST /wp-login.php HTTP/1.1" 200 13029 "-" "Mozilla/5.0"
...
show less
Web App Attack
🇵🇱
Budyn
2026-10-14 02:41:55
(6 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: goblinpot.website | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
2026-10-14 02:29:53
(6 days ago)
Honeypot: http-public probing for vulnerable paths /wp-login.php
Web App Attack
Showing 1 to
6
of 6 reports
