JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.157.112.2

45.157.112.2 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 78%: ?

78%

ISP	VPN Consumer Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.157.112.2

Whois 45.157.112.2

IP Abuse Reports for 45.157.112.2:

This IP address has been reported a total of 44 times from 27 distinct sources. 45.157.112.2 was first reported on April 5th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 integrantservices.com	2026-06-09 05:09:13 (22 hours ago)	(wordpress) Failed wordpress login from 45.157.112.2 (FR/France/-)	Brute-Force
🇺🇸 Mundo Bueno	2026-06-09 04:09:08 (23 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: FR \| UA: Mozilla/5.0 (Windows NT 11. ... show more [ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: FR \| UA: Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Sa show less	Hacking Web App Attack
🇩🇪 pscriptos	2026-06-09 02:54:52 (1 day ago)	{"ClientAddr":"45.157.112.2:33783","ClientHost":"45.157.112.2","ClientPort":"33783","ClientUsername" ... show more {"ClientAddr":"45.157.112.2:33783","ClientHost":"45.157.112.2","ClientPort":"33783","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":378890991,"OriginContentSize":418,"OriginDuration":376244941,"OriginStatus":403,"Overhead":2646050,"RequestAddr":"www.cleveradmin.de","RequestContentSize":187,"RequestCount":1618896,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-06-09T04:54:50.515802069+02:00","StartUTC":"2026-06-09T02:54:50.515802069Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-09T04:54:50+02:00"} {"ClientAddr":"45.157.112.2:33783","ClientHost":"45.157.112.2","ClientPort":"33783" ... show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-06-09 01:59:45 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇮🇹 mgarofano80	2026-06-03 06:18:17 (6 days ago)		Brute-Force Web App Attack
🇺🇸 integrantservices.com	2026-06-03 03:35:41 (6 days ago)	(wordpress) Failed wordpress login from 45.157.112.2 (FR/France/-)	Brute-Force
🇫🇷 SpaceHost-Server	2026-06-01 22:34:44 (1 week ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-05-31 22:33:21 (1 week ago)		Brute-Force Web App Attack
🇩🇪 Tha_14	2026-05-29 19:47:24 (1 week ago)	Attempt to log in with non-existing username: admin	Bad Web Bot
🇫🇷 tecnicorioja	2026-05-27 22:00:13 (1 week ago)	POST /xmlrpc.php [27/May/2026:08:28:39	Brute-Force Web App Attack
🇩🇪 filstal.org	2026-05-26 14:08:48 (2 weeks ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths detected by Fail2Ban show less	Hacking Brute-Force Web App Attack
🇨🇳 pengpeng	2026-05-22 00:58:08 (2 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 33541 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 33541 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Jason Howell	2026-05-19 00:39:16 (3 weeks ago)	45.157.112.2 - - [18/May/2026:19:39:13 -0500] "GET /xmlrpc.php HTTP/1.1" 405 2830 "-" "Mozilla/5.0 ( ... show more 45.157.112.2 - - [18/May/2026:19:39:13 -0500] "GET /xmlrpc.php HTTP/1.1" 405 2830 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 45.157.112.2 - - [18/May/2026:19:39:14 -0500] "GET /xmlrpc.php HTTP/1.1" 405 241 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 45.157.112.2 - - [18/May/2026:19:39:14 -0500] "GET /xmlrpc.php HTTP/1.1" 405 241 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.157.112.2 - - [18/May/2026:19:39:14 -0500] "GET /xmlrpc.php HTTP/1.1" 405 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" 45.157.112.2 - - [18/May/2026:19:39:15 -0500] "GET /xmlrpc.php HTTP/1.1" 405 241 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇮 KnightIndustries	2026-05-18 11:44:54 (3 weeks ago)	2026-05-18T13:44:31.162554+02:00 milkyway wordpress(learncryptography.pw)[152336]: XML-RPC authentic ... show more 2026-05-18T13:44:31.162554+02:00 milkyway wordpress(learncryptography.pw)[152336]: XML-RPC authentication failure for macminty from 45.157.112.2 2026-05-18T13:44:46.282384+02:00 milkyway wordpress(oldscarborough.com)[163635]: XML-RPC authentication failure for joshua from 45.157.112.2 2026-05-18T13:44:47.374863+02:00 milkyway wordpress(oldscarborough.com)[170126]: XML-RPC authentication failure for joshua from 45.157.112.2 ... show less	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-05-18 06:09:37 (3 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 185.196.161.189

🇬🇧 185.195.13.179

🇳🇱 176.65.139.214

🇦🇲 176.32.193.16

🇺🇸 135.222.40.18

🇨🇳 121.227.152.171

🇨🇳 115.231.78.11

🇨🇳 113.141.72.65

🇲🇦 81.192.46.29

🇺🇸 47.85.109.19

🇬🇧 45.154.195.201

🇨🇴 8.242.185.7

🇺🇸 172.98.33.13

🇳🇱 159.223.213.49

🇺🇸 154.193.11.149

🇫🇮 147.185.133.114

🇺🇸 136.117.110.240

🇰🇷 112.151.178.49

🇧🇦 92.36.178.184

🇲🇩 91.208.184.122