JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.157.112.30

45.157.112.30 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 8%: ?

ISP	VPN Consumer Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.157.112.30

Whois 45.157.112.30

IP Abuse Reports for 45.157.112.30:

This IP address has been reported a total of 42 times from 28 distinct sources. 45.157.112.30 was first reported on April 11th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-07-30 09:25:04 (1 month ago)	45.157.112.30 - - [30/Jul/2026:12:25:00 +0300] "GET /wp-login.php HTTP/1.1" 404 4771 "-" "Mozilla/5. ... show more 45.157.112.30 - - [30/Jul/2026:12:25:00 +0300] "GET /wp-login.php HTTP/1.1" 404 4771 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 45.157.112.30 - - [30/Jul/2026:12:25:03 +0300] "GET /wp-login.php HTTP/1.1" 301 668 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 08:22:49 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 45.157.112.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.157.112.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 04:22:45.519873 2026] [security2:error] [pid 1933326:tid 1933326] [client 45.157.112.30:43091] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rocksolidhomebuilders.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rocksolidhomebuilders.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amsJ1bkYD_XpE_rb7yzH-QAAAAU"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-03 22:00:02 (1 month ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-06-30 19:21:31 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 13:29:45 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 45.157.112.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.157.112.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 09:29:37.759863 2026] [security2:error] [pid 692:tid 692] [client 45.157.112.30:41657] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nebraskaadaptivesports.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nebraskaadaptivesports.org"] [uri "/wp-json/wp/v2/users"] [unique_id "akEhwZvpH9nPaCHwteH8CQAAABk"], referer: https://t.co/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-06-28 10:25:05 (2 months ago)	angleseaarthouse.com.au:443 45.157.112.30 - - [28/Jun/2026:20:25:02 +1000] "GET /?author=1 HTTP/1.1" ... show more angleseaarthouse.com.au:443 45.157.112.30 - - [28/Jun/2026:20:25:02 +1000] "GET /?author=1 HTTP/1.1" 404 184480 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" ... show less	Web App Attack
Anonymous	2026-06-28 00:05:05 (2 months ago)	CMS login brute force detected by Fail2Ban	Brute-Force Web App Attack
🇲🇽 octageeks.com	2026-06-16 04:08:51 (2 months ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇳🇱 Site.eu	2026-06-16 00:30:34 (2 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇮 YF	2026-06-15 20:01:00 (2 months ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇺🇦 URAN Publishing Service	2026-06-14 21:30:24 (2 months ago)	45.157.112.30 - - [15/Jun/2026:00:30:21 +0300] "GET /wp-login.php HTTP/1.1" 404 3356 "-" "Mozilla/5. ... show more 45.157.112.30 - - [15/Jun/2026:00:30:21 +0300] "GET /wp-login.php HTTP/1.1" 404 3356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 45.157.112.30 - - [15/Jun/2026:00:30:23 +0300] "GET /wp-admin/ HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" ... show less	Web App Attack
🇺🇸 jormaster3k	2026-06-14 04:59:24 (2 months ago)	Attack against WordPress	Web App Attack
🇫🇷 masterguru	2026-06-10 05:20:31 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.157.112.30 (FR/France/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.157.112.30 (FR/France/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 mnsf	2026-06-10 05:06:26 (2 months ago)	Scanning/Probing (11)	Brute-Force Web App Attack
🇫🇷 masterguru	2026-06-10 03:02:53 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.157.112.30 (FR/France/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.157.112.30 (FR/France/-): 1 in the last 3600 secs (0-195) show less	Hacking

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.244.170.209

🇦🇷 201.217.247.52

🇸🇪 195.252.61.93

🇺🇸 194.61.9.227

🇳🇱 193.176.31.147

🇳🇱 185.226.197.105

🇺🇸 168.62.199.219

🇮🇳 162.4.73.198

🇧🇷 143.137.84.179

🇨🇳 121.61.131.190

🇨🇳 116.179.32.20

🇻🇳 116.110.220.157

🇮🇳 103.30.80.202

🇬🇧 81.19.219.244

🇱🇻 77.83.1.121

🇱🇻 77.83.1.81

🇺🇸 66.132.186.250

🇺🇸 64.62.197.7

🇳🇱 45.148.10.151

🇵🇰 39.34.166.113