JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.138.13

45.154.138.13 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Marseille, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.138.13

Whois 45.154.138.13

IP Abuse Reports for 45.154.138.13:

This IP address has been reported a total of 125 times from 59 distinct sources. 45.154.138.13 was first reported on January 31st 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 sms.ru	2026-06-07 14:11:36 (2 months ago)	/vendor/phpunit/phpunit/src/Util/PHP/as.php	Web App Attack
🇫🇷 Octopuce	2026-06-07 03:49:20 (2 months ago)	Aggressive web search of vulnerable pages: /wp-content/ALFA_DATA/alfacgiapi/bypass.php /wp-admin/mai ... show more Aggressive web search of vulnerable pages: /wp-content/ALFA_DATA/alfacgiapi/bypass.php /wp-admin/maint/about.php /wp-admin/js/about.php /wp-con ... show less	Web App Attack
🇮🇹 A000Z	2026-06-05 12:29:57 (2 months ago)	Fail2Ban: 45.154.138.13 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 45.154.138.13 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇬🇧 Oakley	2026-06-05 12:15:47 (2 months ago)	(confirmed_bot_sig) Confirmed bot	Hacking
Anonymous	2026-06-05 11:21:24 (2 months ago)	"GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1"	Hacking Web App Attack
🇩🇪 Ba-Yu	2026-06-05 05:05:17 (2 months ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇬🇧 consul.to	2026-06-05 04:08:51 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-06-04 18:41:34 (2 months ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)	Hacking
🇩🇪 LRob	2026-04-30 00:00:38 (4 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-19 02:37:25 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.154.138.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.154.138.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 22:37:20.553828 2026] [security2:error] [pid 2841586:tid 2841586] [client 45.154.138.13:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail-pmg.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail-pmg.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeQ_4GhmEYkDRwCk7GDy9QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 00:55:21 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.154.138.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.154.138.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 20:55:16.584340 2026] [security2:error] [pid 22409:tid 22409] [client 45.154.138.13:49825] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sharonmauldin.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sharonmauldin.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeQn9FjTvu7su5sGqxTE8AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 00:30:46 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.154.138.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.154.138.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 20:30:39.322960 2026] [security2:error] [pid 1239282:tid 1239282] [client 45.154.138.13:50557] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|goikopro.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "goikopro.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeQiL44AiRIjTd047XJdNwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 00:11:50 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.154.138.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.154.138.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 20:11:44.474591 2026] [security2:error] [pid 312302:tid 312302] [client 45.154.138.13:28151] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.4115thewestford.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.4115thewestford.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeQdwD4F9zhz7R3_p_fBIwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-18 23:13:33 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.154.138.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.154.138.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 19:13:28.922796 2026] [security2:error] [pid 2761315:tid 2761315] [client 45.154.138.13:48029] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|smallbizreorg.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "smallbizreorg.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeQQGJuMLRa6OUL_MAJ66gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 ago.su	2026-04-08 01:42:44 (4 months ago)	F2B blocked nginx bad bot [otd]	Hacking Web App Attack

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.54

🇺🇸 164.92.100.172

🇬🇧 81.19.219.238

🇬🇧 81.19.219.218

🇺🇸 35.145.213.168

🇳🇱 204.76.203.221

🇳🇱 204.76.203.213

🇬🇧 194.50.235.153

🇬🇧 193.176.29.13

🇦🇷 186.22.253.194

🇫🇷 86.215.195.78

🇸🇬 84.75.155.132

🇺🇸 65.111.2.8

🇺🇸 64.62.156.45

🇺🇸 40.119.44.109

🇬🇧 35.203.210.244

🇬🇧 35.203.210.55

🇮🇳 27.34.247.123

🇳🇱 185.223.235.50

🇨🇳 182.40.103.253