JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.146.54.9

45.146.54.9 was found in our database!

This IP was reported 216 times. Confidence of Abuse is 33%: ?

33%

ISP	VPN Consumer San Francisco, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.146.54.9

Whois 45.146.54.9

IP Abuse Reports for 45.146.54.9:

This IP address has been reported a total of 216 times from 92 distinct sources. 45.146.54.9 was first reported on June 26th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-25 15:52:35 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 45.146.54.9 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.146.54.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 11:52:29.859772 2026] [security2:error] [pid 26459:tid 26459] [client 45.146.54.9:63497] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|thelastnoel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "thelastnoel.com"] [uri "/images/stories/themes.php"] [unique_id "ahRwPRdEi9T2yP5pfMBGQAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-22 16:26:02 (2 weeks ago)	(wordpress) Failed wordpress login from 45.146.54.9 (US/United States/-)	Brute-Force
🇳🇱 Roderic	2026-05-14 02:10:41 (3 weeks ago)	(wordpress-404) Searching for non-existent wordpress installs from 45.146.54.9 (US/United States/Cal ... show more (wordpress-404) Searching for non-existent wordpress installs from 45.146.54.9 (US/United States/California/San Francisco/-/[redacted]) show less	Brute-Force
🇫🇷 Octopuce	2026-05-09 15:01:41 (4 weeks ago)	Aggressive web search of vulnerable pages: /wp-admin/maint/bootstrap.php /themes/zMousse/otuz1.php / ... show more Aggressive web search of vulnerable pages: /wp-admin/maint/bootstrap.php /themes/zMousse/otuz1.php /wp-content/edit-wolf.php /wp-content/plugin ... show less	Web App Attack
🇫🇷 Yepngo	2026-04-29 22:45:14 (1 month ago)	45.146.54.9 - - [30/Apr/2026:00:45:14 +0200] "POST /wp-login.php HTTP/2.0" 200 12078 "-" "Mozilla/5. ... show more 45.146.54.9 - - [30/Apr/2026:00:45:14 +0200] "POST /wp-login.php HTTP/2.0" 200 12078 "-" "Mozilla/5.0" 45.146.54.9 - - [30/Apr/2026:00:45:14 +0200] "POST /wp-login.php HTTP/2.0" 200 12075 "-" "Mozilla/5.0" ... show less	Brute-Force Web App Attack
Anonymous	2026-04-29 21:36:39 (1 month ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 45. ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 45.146.54.9 (US/United States/-) show less	Brute-Force
🇩🇪 LRob.fr	2026-04-26 13:30:05 (1 month ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇦🇺 wysu	2026-04-26 04:30:00 (1 month ago)	Observed password spraying and brute-force activity from 45.146.54.9	Brute-Force Hacking
Anonymous	2026-04-24 01:08:27 (1 month ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 45. ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 45.146.54.9 (US/United States/-) show less	Brute-Force
Anonymous	2026-04-23 21:02:41 (1 month ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇫🇷 masterguru	2026-04-23 17:47:10 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇩🇪 ger-stg-sifi1	2026-03-27 07:41:04 (2 months ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 tecnicorioja	2026-03-26 23:01:19 (2 months ago)	wp-login attack [26/Mar/2026:19:52:23	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-03-25 04:45:07 (2 months ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇨🇦 KIsmay	2026-03-09 21:39:08 (2 months ago)	Mar 9 13:52:57 www4 WPAudit[3131221]: 45.146.54.9 www.cottonwoodc.ca "Mozilla/5.0" Elyena:password ... show more Mar 9 13:52:57 www4 WPAudit[3131221]: 45.146.54.9 www.cottonwoodc.ca "Mozilla/5.0" Elyena:password FAIL Mar 9 15:14:18 www4 WPAudit[3136755]: 45.146.54.9 www.trilloperelloyates.com "Mozilla/5.0" trillo:pass1234 FAIL Mar 9 15:56:51 www4 WPAudit[3138974]: 45.146.54.9 siscobc.com "Mozilla/5.0" sbd-admin:qwerty FAIL Mar 9 17:30:45 www4 WPAudit[3146558]: 45.146.54.9 www.trilloperelloyates.com "Mozilla/5.0" trillo:1qaz2wsx FAIL Mar 9 17:39:07 www4 WPAudit[3137622]: 45.146.54.9 siscobc.com "Mozilla/5.0" sbd-admin:1qaz2wsx FAIL ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 216 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 198.178.235.170

🇺🇬 196.0.41.134

🇪🇨 177.53.215.134

🇺🇸 172.182.211.88

🇫🇷 82.64.198.56

🇺🇸 52.176.138.197

🇳🇱 45.128.199.219

🇺🇸 31.59.40.94

🇵🇰 223.123.44.123

🇺🇸 198.46.134.148

🇦🇷 190.120.176.139

🇨🇳 183.6.118.248

🇻🇳 171.244.142.205

🇩🇪 141.11.36.61

🇨🇳 112.102.223.160

🇷🇺 89.109.32.120

🇨🇦 82.38.153.125

🇳🇱 45.148.10.183

🇮🇩 43.133.148.170

🇷🇺 213.183.120.56