JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.157.112.41

45.157.112.41 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.157.112.41

Whois 45.157.112.41

IP Abuse Reports for 45.157.112.41:

This IP address has been reported a total of 75 times from 60 distinct sources. 45.157.112.41 was first reported on April 10th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-18 07:13:36 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 Starburst SysOp Team	2026-08-17 18:08:18 (3 days ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 41.112.157.45.rbl.malwa ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 41.112.157.45.rbl.malware.expert succeeded at REQUEST_HEADERS:X-Forwarded-For. (1001000-nue6-2) show less	Hacking
🇫🇷 Baking333	2026-08-17 17:31:14 (3 days ago)	[redacted] 45.157.112.41 - - [17/Aug/2026:18:31:10 +0100] "GET /[redacted] HTTP/1.1" 302 6803 0/1059 ... show more [redacted] 45.157.112.41 - - [17/Aug/2026:18:31:10 +0100] "GET /[redacted] HTTP/1.1" 302 6803 0/105924 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0" [redacted] 45.157.112.41 - - [17/Aug/2026:18:31:11 +0100] "GET / HTTP/1.1" 200 13226 0/164324 "https://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0" show less	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-08-17 17:05:54 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from FR. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from FR. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /old/xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 maxpower	2026-08-17 15:22:58 (3 days ago)	(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 45.157.112.41 (FR/France/-): 3 in the last 360 ... show more (nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 45.157.112.41 (FR/France/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/08/17 17:22:51 [error] 3801834#3801834: 1062831 access forbidden by rule, client: 45.157.112.41, server: notaiopanella.it, request: "GET /xmlrpc.php HTTP/2.0", host: "ipv6.notaiopanella.it" 2026/08/17 17:22:51 [error] 3801839#3801839: 1062833 access forbidden by rule, client: 45.157.112.41, server: notaiopanella.it, request: "GET /xmlrpc.php HTTP/2.0", host: "www.notaiopanella.it" 2026/08/17 17:22:52 [error] 3801846#3801846: 1062861 access forbidden by rule, client: 45.157.112.41, server: notaiopanella.it, request: "GET /wp/xmlrpc.php HTTP/2.0", host: "www.notaiopanella.it" show less	Port Scan
🇺🇸 ambor	2026-08-17 14:45:53 (3 days ago)	L0ss Honeypot: WordPress XML-RPC attack attempt. Path: /xmlrpc.php	Brute-Force Web App Attack
🇫🇷 Baking333	2026-08-17 13:58:37 (3 days ago)	[redacted] 45.157.112.41 - - [17/Aug/2026:14:58:35 +0100] "GET /[redacted] HTTP/1.1" 302 6793 0/8112 ... show more [redacted] 45.157.112.41 - - [17/Aug/2026:14:58:35 +0100] "GET /[redacted] HTTP/1.1" 302 6793 0/81122 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" [redacted] 45.157.112.41 - - [17/Aug/2026:14:58:35 +0100] "GET / HTTP/1.1" 200 13450 0/621729 "https://[redacted]/[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" [redacted] 45.157.112.41 - - [17/Aug/2026:14:58:36 +0100] "GET /wp/[redacted] HTTP/1.1" 302 1574 0/74967 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-08-17 13:52:49 (3 days ago)	(php_susp_dir) srv104 PHP Suspicious Directory 45.157.112.41 (FR/France/-): 1 in the last 3600 secs; ... show more (php_susp_dir) srv104 PHP Suspicious Directory 45.157.112.41 (FR/France/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 lespbaj	2026-08-17 13:17:23 (3 days ago)	{"time":"2026-08-17T13:17:20+00:00","ip":"45.157.112.41","method":"GET","uri":"/xmlrpc.php","ua":"Mo ... show more {"time":"2026-08-17T13:17:20+00:00","ip":"45.157.112.41","method":"GET","uri":"/xmlrpc.php","ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0","referer":""} ... show less	Bad Web Bot Web App Attack
Anonymous	2026-08-17 13:07:11 (3 days ago)	Automated web scanner. Requested suspicious paths: /xmlrpc.php \| /xmlrpc.php \| /xmlrpc.php, /xmlrpc. ... show more Automated web scanner. Requested suspicious paths: /xmlrpc.php \| /xmlrpc.php \| /xmlrpc.php, /xmlrpc.php \| /xmlrpc.php \| /xmlrpc.php \| /xmlrpc.php. UTC: 2026-08-17 12:58:50. show less	Web App Attack
🇫🇷 bazter.pro	2026-08-17 13:06:44 (3 days ago)	Auto-Ban [2026-08-17 16:06:43]: CRITICAL: Exploit trap paths (20); DC: VPN Consumer Paris, France [P ... show more Auto-Ban [2026-08-17 16:06:43]: CRITICAL: Exploit trap paths (20); DC: VPN Consumer Paris, France [Paths: 7] \| Details: Exploit trap paths: /xmlrpc.php, /xmlrpc.php, /wp/xmlrpc.php, /wordpress/xmlrpc.php, /blog/xmlrpc.php \| Sensitive files/paths: /xmlrpc.php, /xmlrpc.php, /wp/xmlrpc.php, /wordpress/xmlrpc.php, /blog/xmlrpc.php \| 404 errors (13): /wp/xmlrpc.php, /backup/xmlrpc.php, /wordpress/xmlrpc.php, /old/xmlrpc.php, /blog/xmlrpc.php, /xmlrpc.php, /site/xmlrpc.php \| 403 errors (7): /wp/xmlrpc.php, /backup/xmlrpc.php, /wordpress/xmlrpc.php, /old/xmlrpc.php, /blog/xmlrpc.php, /xmlrpc.php, /site/xmlrpc.php show less	Web App Attack Hacking
🇺🇸 Vianpyro	2026-08-17 12:50:03 (3 days ago)	Honeypot: 182 request(s) in 0 min. Paths: /xmlrpc.php, /wp/xmlrpc.php, /wordpress/xmlrpc.php, /blog/ ... show more Honeypot: 182 request(s) in 0 min. Paths: /xmlrpc.php, /wp/xmlrpc.php, /wordpress/xmlrpc.php, /blog/xmlrpc.php, /site/xmlrpc.php. Method(s): GET. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHT. ASN: 206092 (VPN Consumer Paris, France). show less	Web App Attack Bad Web Bot Brute-Force
🇮🇹 mgarofano80	2026-08-17 12:30:14 (3 days ago)		Brute-Force Web App Attack
Anonymous	2026-08-17 11:58:12 (3 days ago)	Automatically blocked after 7 security events. Observed repeated web application attack probes. Sour ... show more Automatically blocked after 7 security events. Observed repeated web application attack probes. Source: Cloudflare security controls. show less	Hacking Web App Attack
🇫🇷 Cuteminded	2026-08-17 11:56:40 (3 days ago)	Blocked for suspicious web activity	Web App Attack

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.122

🇺🇸 212.87.218.98

🇧🇷 205.210.31.221

🇭🇰 118.193.33.216

🇫🇷 104.23.225.135

🇫🇷 85.217.140.47

🇺🇸 82.26.208.74

🇸🇬 47.79.200.147

🇯🇵 43.130.249.176

🇺🇸 2800:1e0:2000:104:9999::245

🇨🇳 182.43.76.81

🇨🇳 116.27.148.208

🇺🇸 104.152.52.107

🇫🇷 104.23.225.134

🇫🇷 85.217.140.10

🇺🇸 82.26.208.73

🇹🇼 60.199.224.55

🇺🇸 52.44.229.124

🇺🇸 45.194.67.30

🇺🇸 34.44.221.77