This IP address has been reported a total of
8
times from
8 distinct
sources.
157.245.238.112 was first reported on
October 13th 2026 , and the most recent report was
2 hours ago United States of America
with 2
reports;
Finland
with 1
report;
France
with 1
report.
The most common categories in these recent reports were:
Web App Attack
5
times;
Brute-Force
4
times;
Hacking
1
time;
Web Spam
1
time;
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇮
abdubhai
2026-10-13 09:55:11
(2 hours ago)
157.245.238.112 - - [13/Oct/2026
...
Brute-Force
🇮🇹
VHosting
2026-10-13 09:55:07
(2 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
IndigoRidge
2026-10-13 09:54:29
(2 hours ago)
157.245.238.112 - - [13/Oct/2026:05:48:09 -0400] "POST /wp-login.php HTTP/1.1" 200 13426 "-" "Mozill ...
show more
157.245.238.112 - - [13/Oct/2026:05:48:09 -0400] "POST /wp-login.php HTTP/1.1" 200 13426 "-" "Mozilla/5.0"
157.245.238.112 - - [13/Oct/2026:05:49:38 -0400] "POST /wp-login.php HTTP/1.1" 200 13426 "-" "Mozilla/5.0"
157.245.238.112 - - [13/Oct/2026:05:51:04 -0400] "POST /wp-login.php HTTP/1.1" 200 13426 "-" "Mozilla/5.0"
157.245.238.112 - - [13/Oct/2026:05:52:41 -0400] "POST /wp-login.php HTTP/1.1" 200 13426 "-" "Mozilla/5.0"
157.245.238.112 - - [13/Oct/2026:05:54:26 -0400] "POST /wp-login.php HTTP/1.1" 200 13426 "-" "Mozilla/5.0"
...
show less
Web App Attack
🇫🇷
masterguru
2026-10-13 09:54:19
(2 hours ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-196)
Hacking
🇳🇱
Alt255
2026-10-13 09:54:12
(2 hours ago)
[ti-01ov] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Examp ...
show more
[ti-01ov] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Example: 157.245.238.112 - - \[13/Oct/2026:11:49:17 +0200\] "POST /wp-login.php HTTP/1.1" 200 14453 "-" "Mozilla/5.0"
157.245.238.112 - - \[13/Oct/2026:11:50:39 +0200\] "POST /wp-login.php HTTP/1.1" 200 14397 "-" "Mozilla/5.0"
157.245.238.112 - - \[13/Oct/2026:11:52:14 +0200\] "POST /wp-login.php HTTP/1.1" 200 14397 "-" "Mozilla/5.0"
157.245.238.112 - - \[13/Oct/2026:11:53:57 +0200\] "POST /wp-login.php HTTP/1.1" 200 14453 "-" "Mozilla/5.0"
...
show less
Brute-Force
Web App Attack
🇳🇴
jad-abuse
2026-10-13 09:41:18
(2 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 1 hits.
show less
Brute-Force
Web App Attack
🇺🇸
JL41414141
2026-10-13 09:18:17
(2 hours ago)
157.245.238.112 - - [13/Oct/2026:09:08:46 +0000] "GET /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5 ...
show more
157.245.238.112 - - [13/Oct/2026:09:08:46 +0000] "GET /wp-login.php HTTP/1.1" 404 118 "-" "Mozilla/5.0"
157.245.238.112 - - [13/Oct/2026:09:18:17 +0000] "GET /wp-json/batch/v1 HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Web Spam
🇵🇱
Budyn
2026-10-13 09:09:52
(3 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: registry.teddypot.site | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
