JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.76.104.16

45.76.104.16 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 47%: ?

47%

ISP	Vultr Holdings, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Hostname(s)	45.76.104.16.vultrusercontent.com
Domain Name	vultr.com
Country	🇯🇵 Japan
City	Oi, Saitama

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.76.104.16

Whois 45.76.104.16

IP Abuse Reports for 45.76.104.16:

This IP address has been reported a total of 33 times from 25 distinct sources. 45.76.104.16 was first reported on January 21st 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-08-17 05:41:51 (1 day ago)	[DDoS Attacker] This IP was attacking website bgbot.bravohvh.fun and sent 864 requests on port 443	DDoS Attack Web App Attack
🇷🇸 Smel	2026-08-16 07:19:12 (2 days ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇮🇩 sockominfo	2026-08-15 05:00:53 (3 days ago)	Zimbra: Login failures from malicious IP: 45.76.104.16. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 45.76.104.16. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-15 04:00:09 (3 days ago)	Zimbra: Login failures from malicious IP: 45.76.104.16. Threat Score: 6/10 (MEDIUM). Reported by Tan ... show more Zimbra: Login failures from malicious IP: 45.76.104.16. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇹 VHosting	2026-08-14 01:35:03 (4 days ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇫🇮 NoaQT	2026-07-30 12:10:52 (2 weeks ago)	2026-07-30T12:10:50.336907+00:00 ingress-1 haproxy[265]: 45.76.104.16:39742 [30/Jul/2026:12:10:50.33 ... show more 2026-07-30T12:10:50.336907+00:00 ingress-1 haproxy[265]: 45.76.104.16:39742 [30/Jul/2026:12:10:50.336] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 336/325/0/0/0 0/0 "GET https://mentis.si/?ZcCgNzYnQ HTTP/2.0" 2026-07-30T12:10:50.336922+00:00 ingress-1 haproxy[265]: 45.76.104.16:39742 [30/Jul/2026:12:10:50.336] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 336/325/0/0/0 0/0 "GET https://mentis.si/?OFxCTUt HTTP/2.0" 2026-07-30T12:10:50.336933+00:00 ingress-1 haproxy[265]: 45.76.104.16:39742 [30/Jul/2026:12:10:50.336] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 336/325/0/0/0 0/0 "GET https://mentis.si/?TRWfGgk HTTP/2.0" 2026-07-30T12:10:50.336944+00:00 ingress-1 haproxy[265]: 45.76.104.16:39742 [30/Jul/2026:12:10:50.336] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 336/325/0/0/0 0/0 "GET https://mentis.si/?qimSZg HTTP/2.0" 2026-07-30T12:10:50.336955+00:00 ingress-1 haproxy[265]: 45.76.104.16:39742 [30/Jul/2026:12:10:50.336] https_in~ https_ ... show less	DDoS Attack
🇺🇸 COMPLEX	2026-07-27 22:42:02 (3 weeks ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇷🇴 clauss	2026-07-27 22:26:29 (3 weeks ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇪🇸 el-brujo	2026-07-17 10:41:15 (1 month ago)	07/17/2026-12:32:18.122170 45.76.104.16 Protocol: 6 ET SCAN Behavioral Unusually fast Terminal Serve ... show more 07/17/2026-12:32:18.122170 45.76.104.16 Protocol: 6 ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound) show less	Hacking
🇮🇩 sockominfo	2026-07-11 23:00:52 (1 month ago)	Zimbra: Login failures from malicious IP: 45.76.104.16. Threat Score: 6.2/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 45.76.104.16. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 72%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-11 22:00:08 (1 month ago)	Zimbra: Login failures from malicious IP: 45.76.104.16. Threat Score: 5.3/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 45.76.104.16. Threat Score: 5.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇨🇦 Julio Covolato	2026-06-29 15:55:01 (1 month ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇩🇪 filstal.org	2026-06-21 15:56:19 (1 month ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇺🇸 nowyouknow	2026-06-20 01:33:07 (1 month ago)	(From [email protected]) Hi there, I'm Amanda with Trusted Virtual Team. I’m reach ... show more (From [email protected]) Hi there, I'm Amanda with Trusted Virtual Team. I’m reaching out because we offer Virtual Assistants that utilize our custom-built AI tool, MAVIS (My Advanced Virtual Intelligent System), that easily replaces a 20-man team. We overtake and handle all of your marketing, administrative tasks, graphic design, video animations, accounting, and even all your prospecting with our system. This isn't a software you have to learn, and all you have to do is delegate to a human Virtual Assistant to get everything done! Reply YES to schedule a Zoom meeting or STOP to unsubscribe. show less	Phishing Web Spam
🇮🇩 xveil	2026-06-17 11:47:39 (2 months ago)	2026-06-17T18:47:37.472234 mail-honeypot postfix/submission/smtpd[6037]: warning: unknown[45.76.104. ... show more 2026-06-17T18:47:37.472234 mail-honeypot postfix/submission/smtpd[6037]: warning: unknown[45.76.104.16]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2620:171:82:f003:9999::50

🇺🇸 2604:a940:301:225:0:f::

🇺🇸 195.184.76.198

🇳🇱 193.176.31.249

🇧🇷 35.247.233.119

🇺🇸 20.42.19.40

🇳🇱 2001:67c:e60:c0c:192:42:116:92

🇳🇱 213.176.26.194

🇳🇱 185.224.128.14

🇺🇸 162.216.150.184

🇻🇳 160.250.129.49

🇺🇸 149.34.250.40

🇨🇳 111.7.100.40

🇧🇩 103.26.136.30

🇨🇦 99.236.127.166

🇭🇺 89.134.193.117

🇵🇱 83.10.177.151

🇬🇧 35.203.210.91

🇯🇵 34.97.199.27

🇸🇬 212.73.148.8