JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.41.128.12

45.41.128.12 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	Web2Objects LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62874
Hostname(s)	src45-41-128-12.mail.berlin-business-school.org
Domain Name	web2objects.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.41.128.12

Whois 45.41.128.12

IP Abuse Reports for 45.41.128.12:

This IP address has been reported a total of 24 times from 17 distinct sources. 45.41.128.12 was first reported on October 30th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 MatStef132	2026-07-05 19:22:27 (3 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-06-29 23:18:32 (3 months ago)	MatShield L7: blocked on dev.mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-06-26 11:43:28 (3 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-06-12 22:47:21 (4 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇲🇹 Malta	2026-05-13 17:55:56 (5 months ago)	45.41.128.12 - - [13/May/2026:19:55:55 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 1 ... show more 45.41.128.12 - - [13/May/2026:19:55:55 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 mnsf	2026-05-13 01:05:55 (5 months ago)	Login Too Frequent (7)	Brute-Force Web App Attack
🇮🇹 VHosting	2026-05-12 09:45:03 (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 mind5t0rm	2026-03-30 10:56:54 (6 months ago)	(WPLOGIN,XMLRPC) Login failure/trigger from 45.41.128.12 (US/United States/src45-41-128-12.mail.berl ... show more (WPLOGIN,XMLRPC) Login failure/trigger from 45.41.128.12 (US/United States/src45-41-128-12.mail.berlin-business-school.org): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.41.128.12 - - [30/Mar/2026:17:56:43 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 45.41.128.12 - - [30/Mar/2026:17:56:48 +0700] "GET /wp-login.php HTTP/2.0" 200 2526 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 45.41.128.12 - - [30/Mar/2026:17:56:49 +0700] "POST /wp-login.php HTTP/2.0" 200 2636 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" show less	Port Scan
🇫🇷 bazter.pro	2026-03-30 09:24:32 (6 months ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
Anonymous	2026-03-29 22:01:11 (6 months ago)	(mod_security) mod_security triggered on hostname [redacted] 45.41.128.12 (US/United States/src45-41 ... show more (mod_security) mod_security triggered on hostname [redacted] 45.41.128.12 (US/United States/src45-41-128-12.mail.berlin-business-school.org) show less	SQL Injection
Anonymous	2026-03-24 08:44:29 (6 months ago)	(xmlrpc) Failed wordpress XMLRPC 45.41.128.12 (US/United States/src45-41-128-12.mail.berlin-business ... show more (xmlrpc) Failed wordpress XMLRPC 45.41.128.12 (US/United States/src45-41-128-12.mail.berlin-business-school.org) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-03-24 04:24:44 (6 months ago)	(mod_security) mod_security (id:240335) triggered by 45.41.128.12 (src45-41-128-12.mail.berlin-busin ... show more (mod_security) mod_security (id:240335) triggered by 45.41.128.12 (src45-41-128-12.mail.berlin-business-school.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 00:24:40.326628 2026] [security2:error] [pid 22339:tid 22353] [client 45.41.128.12:5566] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.41.128.12 (+1 hits since last alert)\|transitionalcareservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "transitionalcareservices.com"] [uri "/xmlrpc.php"] [unique_id "acISCIwM7iDvPWhv2GkZJQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 leolemos	2026-03-23 23:20:04 (6 months ago)	45.41.128.12 - - [23/Mar/2026:20:19:59 -0300] "POST /xmlrpc.php HTTP/2.0" 403 426 "-" "Mozilla/5.0 ( ... show more 45.41.128.12 - - [23/Mar/2026:20:19:59 -0300] "POST /xmlrpc.php HTTP/2.0" 403 426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 45.41.128.12 - - [23/Mar/2026:20:20:00 -0300] "POST /wp-login.php HTTP/2.0" 200 3023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 45.41.128.12 - - [23/Mar/2026:20:20:01 -0300] "POST /xmlrpc.php HTTP/2.0" 403 426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 45.41.128.12 - - [23/Mar/2026:20:20:03 -0300] "POST /wp-login.php HTTP/2.0" 200 3363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-03-23 18:06:58 (6 months ago)	(mod_security) mod_security (id:240335) triggered by 45.41.128.12 (src45-41-128-12.mail.berlin-busin ... show more (mod_security) mod_security (id:240335) triggered by 45.41.128.12 (src45-41-128-12.mail.berlin-business-school.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 23 14:06:53.095925 2026] [security2:error] [pid 26773:tid 26773] [client 45.41.128.12:12134] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.41.128.12 (+1 hits since last alert)\|www.veneerdent.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.veneerdent.com"] [uri "/xmlrpc.php"] [unique_id "acGBPWtBX_kF5Rra8e9_pQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-03-23 13:15:04 (6 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 162.158.111.177

🇺🇸 130.49.10.241

🇵🇱 83.168.110.251

🇨🇦 4.172.250.34

🇧🇪 194.110.115.46

🇺🇸 162.216.150.216

🇩🇪 162.158.111.178

🇦🇫 149.54.40.222

🇺🇸 129.121.139.106

🇨🇳 106.12.181.132

🇨🇦 85.217.149.51

🇬🇧 64.205.72.201

🇲🇾 47.254.231.20

🇳🇱 45.148.10.141

🇮🇳 20.204.146.105

🇸🇬 2407:1c00:6100:a890::

🇹🇼 220.130.7.191

🇬🇧 200.138.46.243

🇳🇱 195.178.110.30

🇰🇿 185.206.32.100