JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.90.114.45

157.90.114.45 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	kielwerk.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.90.114.45

Whois 157.90.114.45

IP Abuse Reports for 157.90.114.45:

This IP address has been reported a total of 36 times from 32 distinct sources. 157.90.114.45 was first reported on October 15th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Host One	2026-10-17 04:45:27 (8 hours ago)	Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting s ... show more Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Automated report. show less	Brute-Force Web App Attack
🇬🇧 Bytemark	2026-10-16 08:06:36 (1 day ago)	157.90.114.45 - - [16/Oct/2026:09:06:34 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/x ... show more 157.90.114.45 - - [16/Oct/2026:09:06:34 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 157.90.114.45 - - [16/Oct/2026:09:06:34 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 157.90.114.45 - - [16/Oct/2026:09:06:35 +0100] "GET /wp-login.php HTTP/1.1" 404 27 "http://xiaomi.eu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" show less	Brute-Force Web App Attack
🇦🇺 electronico	2026-10-16 07:55:19 (1 day ago)	157.90.114.45 - - [16/Oct/2026:18:55:18 +1100] "POST /xmlrpc.php HTTP/1.1" 404 5580 "-" "Mozilla/5.0 ... show more 157.90.114.45 - - [16/Oct/2026:18:55:18 +1100] "POST /xmlrpc.php HTTP/1.1" 404 5580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" ... show less	Brute-Force Web App Attack
🇦🇺 A.i.D.A.N.N	2026-10-16 07:42:20 (1 day ago)	A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected	Web App Attack
🇫🇮 dcomsystems	2026-10-16 06:16:02 (1 day ago)	157.90.114.45 - - [16/Oct/2026:08:16:00 +0200] "POST /xmlrpc.php HTTP/1.1" 301 481 "-" "Mozilla/5.0 ... show more 157.90.114.45 - - [16/Oct/2026:08:16:00 +0200] "POST /xmlrpc.php HTTP/1.1" 301 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 157.90.114.45 - - [16/Oct/2026:08:16:01 +0200] "POST /xmlrpc.php HTTP/1.1" 301 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 157.90.114.45 - - [16/Oct/2026:08:16:01 +0200] "POST /xmlrpc.php HTTP/1.1" 301 481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇳🇨 ACE-INFORMATIQUE.NC	2026-10-16 06:00:14 (1 day ago)	Malicious CGI/web attack blocked by Fail2ban	Web App Attack
🇨🇭 zynex	2026-10-16 05:46:03 (1 day ago)	URL Probing: /xmlrpc.php	Web App Attack
🇬🇧 Bytemark	2026-10-16 05:07:02 (1 day ago)	157.90.114.45 - - [16/Oct/2026:06:07:01 +0100] "POST /xmlrpc.php HTTP/1.1" 404 6605 "-" "Mozilla/5.0 ... show more 157.90.114.45 - - [16/Oct/2026:06:07:01 +0100] "POST /xmlrpc.php HTTP/1.1" 404 6605 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 157.90.114.45 - - [16/Oct/2026:06:07:01 +0100] "POST /xmlrpc.php HTTP/1.1" 404 6605 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 157.90.114.45 - - [16/Oct/2026:06:07:01 +0100] "GET /wp-login.php HTTP/1.1" 404 293 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇧🇷 dominioz	2026-10-16 04:54:43 (1 day ago)	2026-10-16 04:53:41 POST /xmlrpc.php - - 157.90.114.45 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64; ... show more 2026-10-16 04:53:41 POST /xmlrpc.php - - 157.90.114.45 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:140.0)+Gecko/20100101+Firefox/140.0 - 301 776 2026-10-16 04:53:42 POST /xmlrpc.php - - 157.90.114.45 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/138.0.0.0+Safari/537.36 - 301 776 2026-10-16 04:53:42 POST /blog/xmlrpc.php - - 157.90.114.45 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/138.0.0.0+Safari/537.36+Edg/138.0.0.0 - 301 786 ... show less	Web Spam Blog Spam Brute-Force Web App Attack
Anonymous	2026-10-16 04:54:02 (1 day ago)	Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇩🇪 tinect	2026-10-16 04:53:04 (1 day ago)	Gets ban for 4h for triggering tinect/http-sensitive-file-probe at root1.	Web App Attack
🇲🇹 Malta	2026-10-16 04:42:52 (1 day ago)	157.90.114.45 - - [16/Oct/2026:06:42:52 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 157.90.114.45 - - [16/Oct/2026:06:42:52 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇧🇷 Host One	2026-10-16 04:30:35 (1 day ago)	Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting s ... show more Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Automated report. show less	Brute-Force Web App Attack
🇮🇩 PENJAGA.AUM	2026-10-16 04:08:25 (1 day ago)	157.90.114.45 - Attack: Possible XSS attack, js event handler	Web App Attack SQL Injection Spoofing
🇷🇸 pexodelic	2026-10-16 04:05:03 (1 day ago)	Automated report from web, SSH and FTP server logs: 28 requests probing for exposed secrets (.env, . ... show more Automated report from web, SSH and FTP server logs: 28 requests probing for exposed secrets (.env, .git, config files). First reported 2026-10-16 01:05 UTC, last reported 2026-10-16 06:05 UTC; counts cover the current log rotation window. show less	Hacking Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 136.144.160.104

🇨🇳 120.237.113.139

🇨🇳 114.132.92.120

🇮🇳 103.88.76.27

🇺🇸 98.173.235.234

🇳🇱 95.97.25.198

🇵🇱 45.138.12.89

🇨🇦 34.19.156.226

🇺🇸 23.94.155.110

🇰🇷 20.214.147.109

🇺🇸 216.73.160.21

🇧🇷 190.2.78.2

🇨🇳 118.242.18.19

🇦🇴 105.168.234.5

🇱🇦 103.43.76.239

🇰🇿 95.58.255.251

🇦🇪 94.202.91.253

🇦🇷 66.60.27.123

🇮🇳 38.137.58.158

🇨🇳 36.163.118.106