JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.146.54.64

45.146.54.64 was found in our database!

This IP was reported 311 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer San Francisco, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.146.54.64

Whois 45.146.54.64

IP Abuse Reports for 45.146.54.64:

This IP address has been reported a total of 311 times from 147 distinct sources. 45.146.54.64 was first reported on January 15th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Bedios GmbH	2026-07-22 03:50:21 (2 days ago)	Login credentials theft attempt	Hacking
🇲🇹 Malta	2026-07-21 19:10:57 (3 days ago)	45.146.54.64 - - [21/Jul/2026:21:10:57 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 45.146.54.64 - - [21/Jul/2026:21:10:57 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 FeG Deutschland	2026-07-21 10:44:27 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇫🇷 masterguru	2026-07-21 10:29:42 (3 days ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇺🇸 Rayulcifer	2026-07-21 06:27:22 (3 days ago)	[Sat Jun 20 12:35:13.351554 2026] [authz_core:error] [pid 4137839:tid 131152924894912] [client 45.14 ... show more [Sat Jun 20 12:35:13.351554 2026] [authz_core:error] [pid 4137839:tid 131152924894912] [client 45.146.54.64:55155] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sat Jun 20 12:35:13.598907 2026] [authz_core:error] [pid 4137839:tid 131152522241728] [client 45.146.54.64:55155] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-2019.php [Sat Jun 20 12:35:13.922275 2026] [authz_core:error] [pid 4137839:tid 131151616255680] [client 45.146.54.64:55155] AH01630: client denied by server configuration: proxy:http://localhost:4000/atomlib.php [Sat Jun 20 12:35:14.307921 2026] [authz_core:error] [pid 4137839:tid 131153748473536] [client 45.146.54.64:55155] AH01630: client denied by server configuration: proxy:http://localhost:4000/css.php [Sat Jun 20 12:35:14.716734 2026] [authz_core:error] [pid 4137839:tid 131152908109504] [client 45.146.54.64:55155] AH01630: client denied by server configu ... show less	Brute-Force SSH
Anonymous	2026-07-20 22:34:54 (4 days ago)	(caddyscan) Scanner path probe from 45.146.54.64 (US/United States/-): 5 in the last 3600 secs; Port ... show more (caddyscan) Scanner path probe from 45.146.54.64 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 404 210 45.146.54.64 - - [20/Jul/2026:22:28:03 +0000] "GET /.env HTTP/1.1" [REDACTED] 404 224 45.146.54.64 - - [20/Jul/2026:22:30:24 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 45.146.54.64 - - [20/Jul/2026:22:31:04 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 45.146.54.64 - - [20/Jul/2026:22:31:05 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 45.146.54.64 - - [20/Jul/2026:22:34:51 +0000] "GET /.env HTTP/1.1" show less	Port Scan
🇩🇪 Ba-Yu	2026-07-20 12:19:29 (4 days ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2026-07-20 04:20:15 (4 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇺🇸 Lee Daniel	2026-07-18 23:35:25 (6 days ago)	45.146.54.64 - - [18/Jul/2026:19:35:25 -0400] "GET /.env HTTP/1.1" 403 6301 "-" "Mozilla/5.0 (Macint ... show more 45.146.54.64 - - [18/Jul/2026:19:35:25 -0400] "GET /.env HTTP/1.1" 403 6301 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 13:29:49 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 45.146.54.64 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.146.54.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 09:29:43.337273 2026] [security2:error] [pid 7647:tid 7647] [client 45.146.54.64:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "alt_x7Y5EhDHDX60ZEOANQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-18 11:29:23 (6 days ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇺🇸 interbiznw.com	2026-07-18 01:46:52 (6 days ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇪🇸 masterguru	2026-07-14 09:59:41 (1 week ago)	(wplogin) Failed WordPress login from 45.146.54.64 (US/United States/-): 5 in the last 3600 secs (0- ... show more (wplogin) Failed WordPress login from 45.146.54.64 (US/United States/-): 5 in the last 3600 secs (0-122) show less	Hacking
Anonymous	2026-07-13 22:22:04 (1 week ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 MPL	2026-07-13 15:40:53 (1 week ago)	tcp/80 (6 or more attempts)	Port Scan

Showing 1 to 15 of 311 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.34

🇳🇱 185.93.89.147

🇬🇧 193.46.0.234

🇨🇴 186.29.191.95

🇩🇪 167.94.145.17

🇧🇷 131.161.249.165

🇨🇳 118.145.238.60

🇨🇳 111.9.47.89

🇧🇩 103.161.105.30

🇮🇳 103.42.74.124

🇫🇷 92.93.155.27

🇳🇱 91.92.40.12

🇩🇪 85.235.67.179

🇨🇦 75.158.203.80

🇺🇸 23.95.129.74

🇺🇸 2600:1f18:26d4:7e01:4022:af2d:5013:fa43

🇹🇼 198.235.24.100

🇹🇼 198.235.24.58

🇺🇸 185.150.190.130

🇧🇷 179.248.161.45