JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.164.71.25

45.164.71.25 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 55%: ?

55%

ISP	REDE SUL SP LTDA - ME
Usage Type	Fixed Line ISP
ASN	AS268606
Hostname(s)	45.164.71-25.redesulsp.com.br
Domain Name	redesulsp.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.164.71.25

Whois 45.164.71.25

IP Abuse Reports for 45.164.71.25:

This IP address has been reported a total of 19 times from 15 distinct sources. 45.164.71.25 was first reported on January 8th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-09-18 22:22:49 (1 day ago)		Brute-Force Web App Attack
🇨🇭 4server	2026-09-17 21:19:23 (2 days ago)	[ThuSep1723:19:19.1315542026][security2:error][pid698176:tid698221][client45.164.71.25:0]ModSecurity ... show more [ThuSep1723:19:19.1315542026][security2:error][pid698176:tid698221][client45.164.71.25:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"lemox.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqxZV3P9snjQEpyTwI6yygAAAYA\"] show less	Hacking Web App Attack
🇩🇪 Holger	2026-09-15 15:27:30 (4 days ago)	URL probing: POST /xmlrpc.php	Web App Attack
🇺🇸 IndigoRidge	2026-09-09 18:00:52 (1 week ago)	45.164.71.25 - - [09/Sep/2026:13:59:26 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5103 "-" "Mozilla/5.0 ... show more 45.164.71.25 - - [09/Sep/2026:13:59:26 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5103 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36" 45.164.71.25 - - [09/Sep/2026:13:59:51 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5103 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/74.0.0.0 Safari/537.36" 45.164.71.25 - - [09/Sep/2026:14:00:14 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5103 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/86.0.0.0 Safari/537.36" 45.164.71.25 - - [09/Sep/2026:14:00:36 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5103 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/68.0.0.0 Safari/537.36" 45.164.71.25 - - [09/Sep/2026:14:00:51 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5103 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/68.0.0.0 Safari/537.36" ... show less	Web App Attack
🇦🇺 afleventoffice.com.au	2026-09-03 06:00:59 (2 weeks ago)	POST /xmlrpc.php HTTP/1.1	Web App Attack
Anonymous	2026-09-02 18:38:13 (2 weeks ago)	[redacted] 45.164.71.25 - - [02/Sep/2026:20:37:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mo ... show more [redacted] 45.164.71.25 - - [02/Sep/2026:20:37:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [02/Sep/2026:20:37:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/87.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [02/Sep/2026:20:37:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/67.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [02/Sep/2026:20:37:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [02/Sep/2026:20:37:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537 ... show less	Hacking Web App Attack
🇨🇭 4server	2026-09-02 13:21:42 (2 weeks ago)	[WedSep0215:21:37.5147612026][security2:error][pid3919133:tid3920293][client45.164.71.25:0]ModSecuri ... show more [WedSep0215:21:37.5147612026][security2:error][pid3919133:tid3920293][client45.164.71.25:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"allegrafamiglia.ch\"][uri\"/xmlrpc.php\"][unique_id\"apgi4XokrCHiJ1PbfqP_GgAAAQM\"] show less	Hacking Web App Attack
Anonymous	2026-09-01 18:06:04 (2 weeks ago)	Trying to access config files	Web App Attack
Anonymous	2026-08-28 12:05:01 (3 weeks ago)		Web App Attack
Anonymous	2026-08-27 15:39:57 (3 weeks ago)	[redacted] 45.164.71.25 - - [27/Aug/2026:17:39:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mo ... show more [redacted] 45.164.71.25 - - [27/Aug/2026:17:39:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/84.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [27/Aug/2026:17:39:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [27/Aug/2026:17:39:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/93.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [27/Aug/2026:17:39:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [27/Aug/2026:17:39:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) Apple ... show less	Hacking Web App Attack
Anonymous	2026-08-26 20:33:52 (3 weeks ago)	[redacted] 45.164.71.25 - - [26/Aug/2026:22:33:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mo ... show more [redacted] 45.164.71.25 - - [26/Aug/2026:22:33:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/76.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [26/Aug/2026:22:33:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/73.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [26/Aug/2026:22:33:19 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/71.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [26/Aug/2026:22:33:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.0.0 Safari/537.36" [redacted] 45.164.71.25 - - [26/Aug/2026:22:33:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Moz ... show less	Hacking Web App Attack
🇩🇪 Jochen Pretli	2026-08-21 01:36:44 (4 weeks ago)	connection to honeypot	Email Spam Port Scan
🇦🇺 electronico	2026-08-20 21:56:16 (4 weeks ago)	45.164.71.25 - - [21/Aug/2026:08:56:15 +1100] "POST /xmlrpc.php HTTP/1.1" 503 24703 "-" "Mozilla/5.0 ... show more 45.164.71.25 - - [21/Aug/2026:08:56:15 +1100] "POST /xmlrpc.php HTTP/1.1" 503 24703 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-08-20 03:20:26 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-08-20 03:19:04 (1 month ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 201.243.108.110

🇪🇨 210.211.57.49

🇺🇸 205.210.31.45

🇺🇸 205.210.31.43

🇨🇱 201.187.17.172

🇷🇺 195.230.109.219

🇬🇧 188.240.59.2

🇦🇷 186.22.247.145

🇳🇱 176.65.149.182

🇸🇪 157.22.73.87

🇺🇸 147.185.132.208

🇺🇸 104.248.211.171

🇺🇦 91.234.24.80

🇬🇧 81.19.219.213

🇺🇸 64.94.156.225

🇨🇳 58.215.207.238

🇺🇸 32.197.54.36

🇺🇸 20.163.3.133

🇹🇼 220.128.128.230

🇺🇸 205.210.31.39