JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.245.102.40

172.245.102.40 was found in our database!

This IP was reported 185 times. Confidence of Abuse is 56%: ?

56%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	172-245-102-40-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.245.102.40

Whois 172.245.102.40

IP Abuse Reports for 172.245.102.40:

This IP address has been reported a total of 185 times from 91 distinct sources. 172.245.102.40 was first reported on July 15th 2024, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-09 21:13:31 (12 hours ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-09 19:59:50 (13 hours ago)	[da.kdns.gr] httpd-login-spray-site: sites=www.xamogelo.edu.gr; logs=/var/log/httpd/domains/xamogelo ... show more [da.kdns.gr] httpd-login-spray-site: sites=www.xamogelo.edu.gr; logs=/var/log/httpd/domains/xamogelo.edu.gr.log; samples=site_wide=true \| distinct_ips=20 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 conseilgouz	2026-07-01 18:02:54 (1 week ago)	hae-7 : Trying access unauthorized files/dir=>/wp-admin/	Hacking
🇺🇸 TAY	2026-07-01 07:11:36 (1 week ago)	172.245.102.40 - - [01/Jul/2026:15:09:02 +0800] "POST /wp-login.php HTTP/1.1" 200 2824 "-" "Mozilla/ ... show more 172.245.102.40 - - [01/Jul/2026:15:09:02 +0800] "POST /wp-login.php HTTP/1.1" 200 2824 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 172.245.102.40 - - [01/Jul/2026:15:11:35 +0800] "POST /wp-login.php HTTP/1.1" 200 8100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" 172.245.102.40 - - [01/Jul/2026:15:11:35 +0800] "POST /wp-login.php HTTP/1.1" 200 8069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" ... show less	Brute-Force
🇪🇸 masterguru	2026-07-01 02:02:39 (1 week ago)	(wplogin) Failed WordPress login from 172.245.102.40 (US/United States/172-245-102-40-host.colocross ... show more (wplogin) Failed WordPress login from 172.245.102.40 (US/United States/172-245-102-40-host.colocrossing.com): 5 in the last 3600 secs (0-122) show less	Hacking
🇫🇷 ELYAZ	2026-06-28 12:23:50 (1 week ago)	(y4) Failed scan -byebye- from 172.245.102.40 (US/United States/172-245-102-40-host.colocrossing.com ... show more (y4) Failed scan -byebye- from 172.245.102.40 (US/United States/172-245-102-40-host.colocrossing.com): (CF_ENABLE) show less	Hacking
🇮🇩 zam	2026-06-27 01:02:14 (1 week ago)	172.245.102.40 - - [27/Jun/2026:01:02:12 +0000] "POST /wp-login.php HTTP/1.1" 301 277	Web App Attack
🇨🇭 4server	2026-06-26 09:15:06 (2 weeks ago)	[FriJun2611:14:59.7701772026][security2:error][pid3444646:tid3444879][client172.245.102.40:0]ModSecu ... show more [FriJun2611:14:59.7701772026][security2:error][pid3444646:tid3444879][client172.245.102.40:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"\^/wp-content/plugins/$revslider\\|elementor\\|layer-slider$/.\*\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"395\"][id\"960832\"][msg\"WordPresspluginexploitscannerblocked\"][hostname\"mondo-it.ch\"][uri\"/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php\"][unique_id\"aj5DEwHbbkat7eYK7-0mbgAAAMQ\"] show less	Hacking Web App Attack
🇩🇪 4server	2026-06-26 08:35:28 (2 weeks ago)	[FriJun2610:35:22.8494352026][security2:error][pid2950856:tid2950882][client172.245.102.40:0]ModSecu ... show more [FriJun2610:35:22.8494352026][security2:error][pid2950856:tid2950882][client172.245.102.40:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"chesasilva.ch\"][uri\"/wp-config-sample.php\"][unique_id\"aj45ysWgT28xs12GrxfHhgAAARM\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-06-20 08:23:30 (2 weeks ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/plugins/hellopress/wp_filemanager ... show more [Drupal AbuseIPDB module] Request path is blacklisted. /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇩🇪 ger-stg-sifi1	2026-06-09 15:11:09 (1 month ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇪🇸 masterguru	2026-06-08 08:32:53 (1 month ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)	Web App Attack
🇲🇹 Malta	2026-06-08 07:34:09 (1 month ago)	172.245.102.40 - - [08/Jun/2026:09:34:09 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 172.245.102.40 - - [08/Jun/2026:09:34:09 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇫🇷 Octopuce	2026-06-07 09:24:03 (1 month ago)	Aggressive web search of vulnerable pages: /wp-login.php /wp-admin/maint/file.php /.well-known/acme- ... show more Aggressive web search of vulnerable pages: /wp-login.php /wp-admin/maint/file.php /.well-known/acme-challenge/file.php /.well-known/acme-challe ... show less	Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-04 17:34:30 (1 month ago)	Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/172-245-102-40-host.colocrossing.com	Web App Attack

Showing 1 to 15 of 185 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.89

🇺🇸 209.85.222.200

🇮🇳 192.140.154.20

🇷🇺 178.178.194.137

🇺🇸 136.64.39.43

🇨🇳 118.145.238.115

🇳🇬 102.88.137.80

🇦🇺 45.132.224.50

🇯🇵 43.165.173.33

🇨🇳 112.98.153.34

🇮🇳 103.135.229.238

🇳🇱 91.92.42.147

🇺🇸 64.83.70.75

🇧🇷 45.205.1.240

🇳🇱 45.128.199.62

🇵🇪 190.117.96.174

🇧🇷 187.111.28.131

🇲🇾 180.74.91.50

🇺🇸 136.144.33.7

🇩🇪 128.14.225.164