JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.157.112.104

45.157.112.104 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 37%: ?

37%

ISP	VPN Consumer Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.157.112.104

Whois 45.157.112.104

IP Abuse Reports for 45.157.112.104:

This IP address has been reported a total of 67 times from 42 distinct sources. 45.157.112.104 was first reported on April 5th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-08-05 01:59:34 (2 weeks ago)	[05/Aug/2026:04:59:34 +0300] -- 45.157.112.104 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp- ... show more [05/Aug/2026:04:59:34 +0300] -- 45.157.112.104 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇮🇩 xveil	2026-07-30 07:28:13 (3 weeks ago)	2026-07-30T14:28:11.480443 mail-honeypot postfix/submission/smtpd[10233]: warning: unknown[45.157.11 ... show more 2026-07-30T14:28:11.480443 mail-honeypot postfix/submission/smtpd[10233]: warning: unknown[45.157.112.104]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 threatintelligence_bvc	2026-07-30 04:26:09 (3 weeks ago)		Brute-Force
🇫🇮 notelseit	2026-07-30 03:32:43 (3 weeks ago)	2026-07-30T05:32:37.350844+02:00 mail postfix/submission/smtpd[1175712]: warning: unknown[45.157.112 ... show more 2026-07-30T05:32:37.350844+02:00 mail postfix/submission/smtpd[1175712]: warning: unknown[45.157.112.104]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-07-30T05:32:43.276867+02:00 mail postfix/submission/smtpd[1175712]: warning: unknown[45.157.112.104]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-07-30T05:32:43.459924+02:00 mail postfix/submission/smtpd[1175712]: disconnect from unknown[45.157.112.104] ehlo=2 starttls=1 auth=0/2 commands=3/5 ... show less	Brute-Force Email Spam
🇮🇩 bps-statistics	2026-07-30 01:18:57 (3 weeks ago)	WP Login Scan Activities: "2026-07-30T08:18:57.703+07:00" "/wp-login.php" "45.157.112.104" "Mozilla/ ... show more WP Login Scan Activities: "2026-07-30T08:18:57.703+07:00" "/wp-login.php" "45.157.112.104" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" show less	Web App Attack
🇺🇸 bigscoots.com	2026-07-29 14:03:36 (3 weeks ago)	(smtpauth) Failed SMTP AUTH login from 45.157.112.104 (FR/France/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 45.157.112.104 (FR/France/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-29 09:06:16 dovecot_plain authenticator failed for H=([10.120.1.149]) [45.157.112.104]:48529: 535 Incorrect authentication data ([email protected]) 2026-07-29 09:06:23 dovecot_login authenticator failed for H=([10.120.1.149]) [45.157.112.104]:48529: 535 Incorrect authentication data ([email protected]) 2026-07-29 10:03:21 dovecot_plain authenticator failed for H=([10.120.1.149]) [45.157.112.104]:22359: 535 Incorrect authentication data ([email protected]) 2026-07-29 10:03:27 dovecot_login authenticator failed for H=([10.120.1.149]) [45.157.112.104]:22359: 535 Incorrect authentication data ([email protected]) 2026-07-29 10:03:36 dovecot_plain authenticator failed for H=([10.120.1.149]) [45.157.112.104]:12556: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 nyt	2026-07-01 19:31:05 (1 month ago)	Brute-Force, Web App Attack, 503 on login page	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-07-01 17:11:52 (1 month ago)	45.157.112.104 - - [01/Jul/2026:20:11:49 +0300] "GET /wp-login.php HTTP/1.1" 404 3382 "https://www.f ... show more 45.157.112.104 - - [01/Jul/2026:20:11:49 +0300] "GET /wp-login.php HTTP/1.1" 404 3382 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 45.157.112.104 - - [01/Jul/2026:20:11:50 +0300] "GET /wp-admin/ HTTP/1.1" 404 705 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" ... show less	Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-01 01:27:51 (1 month ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack
Anonymous	2026-06-30 02:53:13 (1 month ago)	apache vulnerability scan	Web App Attack
🇨🇦 KIsmay	2026-06-28 21:49:35 (1 month ago)	Jun 28 17:49:07 www4 WPAudit[3611921]: 45.157.112.104 bestnelson.org "Mozilla/5.0 (Macintosh; Intel ... show more Jun 28 17:49:07 www4 WPAudit[3611921]: 45.157.112.104 bestnelson.org "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" katietabor-developer:12345678 FAIL Jun 28 17:49:17 www4 WPAudit[3611929]: 45.157.112.104 bestnelson.org "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" katietabor-developer:admin FAIL Jun 28 17:49:24 www4 WPAudit[3611921]: 45.157.112.104 bestnelson.org "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0" katietabor-developer:admin123 FAIL Jun 28 17:49:29 www4 WPAudit[3611929]: 45.157.112.104 bestnelson.org "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" katietabor-developer:bestnelson FAIL Jun 28 17:49:35 www4 WPAudit[3611921]: 45.157.112.104 bestnelson.org "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, lik ... show less	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-06-27 14:25:57 (1 month ago)	45.157.112.104 - - [27/Jun/2026:17:25:51 +0300] "GET /wp-login.php HTTP/1.1" 404 3360 "-" "Mozilla/5 ... show more 45.157.112.104 - - [27/Jun/2026:17:25:51 +0300] "GET /wp-login.php HTTP/1.1" 404 3360 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 45.157.112.104 - - [27/Jun/2026:17:25:56 +0300] "GET /wp-admin/ HTTP/1.1" 404 705 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-06-26 12:22:01 (1 month ago)	Tries to login WordPress (wp-login.php)	Web App Attack
🇲🇾 Rizzy	2026-06-26 07:48:57 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-06-26 02:25:33 (1 month ago)	45.157.112.104 - - [26/Jun/2026:05:22:22 +0300] "GET /wp-admin/edit.php HTTP/1.1" 404 2799 "https:// ... show more 45.157.112.104 - - [26/Jun/2026:05:22:22 +0300] "GET /wp-admin/edit.php HTTP/1.1" 404 2799 "https://rtpsas.rtf.kpi.ua/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.157.112.104 - - [26/Jun/2026:05:25:28 +0300] "GET /wp-admin/edit.php HTTP/1.1" 404 2800 "https://rtpsas.rtf.kpi.ua/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" ... show less	Web App Attack

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.131.2.3

🇨🇳 218.26.205.154

🇦🇷 190.2.127.182

🇧🇷 131.100.242.102

🇮🇳 122.187.229.129

🇫🇮 65.108.64.32

🇰🇿 37.151.92.31

🇲🇾 202.165.25.8

🇺🇿 198.163.193.149

🇬🇧 135.136.20.12

🇨🇳 111.26.177.216

🇸🇪 109.238.140.87

🇳🇱 91.92.40.171

🇺🇸 64.62.156.33

🇳🇱 45.156.87.254

🇺🇸 38.106.235.75

🇹🇭 118.194.251.141

🇨🇦 85.217.149.24

🇳🇱 45.153.34.144

🇬🇧 31.14.254.108