JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.138.163

45.154.138.163 was found in our database!

This IP was reported 179 times. Confidence of Abuse is 26%: ?

26%

ISP	VPN Consumer Marseille, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.138.163

Whois 45.154.138.163

IP Abuse Reports for 45.154.138.163:

This IP address has been reported a total of 179 times from 72 distinct sources. 45.154.138.163 was first reported on June 14th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-07 15:43:20 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Octopuce	2026-06-06 21:20:55 (1 week ago)	Aggressive web search of vulnerable pages: /pages.php /wp-includes/ID3/module.audio-license.php /wp- ... show more Aggressive web search of vulnerable pages: /pages.php /wp-includes/ID3/module.audio-license.php /wp-content/themes/classwithtostring.php%20 /up ... show less	Web App Attack
🇫🇮 as211431.net	2026-06-05 00:28:57 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-includes/rest-api/about.php UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 consul.to	2026-05-26 16:33:33 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇿🇦 Tokolosh Hunters	2026-05-15 06:48:43 (1 month ago)	AutoBlockWindow-Known bad useragent query-2026-05-15 06:48:42	Bad Web Bot
🇩🇪 Vegascosmetics	2026-04-20 21:50:35 (1 month ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
🇷🇺 sms.ru	2026-04-20 14:07:45 (1 month ago)	/wp-admin/css/softaculous.php	Web App Attack
🇫🇷 dynamix	2026-04-18 04:34:36 (2 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-04-12 17:06:44 (2 months ago)	(mod_security) mod_security (id:234930) triggered by 45.154.138.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:234930) triggered by 45.154.138.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 13:06:37.193885 2026] [security2:error] [pid 3968321:tid 3968321] [client 45.154.138.163:48925] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|photoboothtogo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "photoboothtogo.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "advRHe778pKVZ72_H5PaxAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-12 12:33:35 (2 months ago)	(mod_security) mod_security (id:234930) triggered by 45.154.138.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:234930) triggered by 45.154.138.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 08:33:31.370140 2026] [security2:error] [pid 4095816:tid 4095816] [client 45.154.138.163:46823] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|rahjx.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "rahjx.net"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aduRG0AaTqiGk40hfow6UAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-04-12 10:48:28 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇩🇪 mk-dizajn.hr	2026-04-12 02:27:25 (2 months ago)	$f2bV_matches	Bad Web Bot
🇧🇾 lns.bz	2026-03-28 19:20:25 (2 months ago)	Too many 404 requests [BY]	Web App Attack
🇦🇺 oncord	2026-03-27 11:24:30 (2 months ago)	Form spam	Web Spam
🇪🇸 masterguru	2026-03-26 00:04:34 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot

Showing 1 to 15 of 179 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a940:302:118:0:3c::

🇷🇴 193.46.255.86

🇺🇸 193.34.72.244

🇺🇸 193.34.72.56

🇺🇸 193.34.72.34

🇧🇬 193.24.211.107

🇧🇷 181.218.172.74

🇭🇰 150.5.154.160

🇺🇸 104.23.245.170

🇸🇬 103.189.234.244

🇷🇴 92.118.39.62

🇳🇱 45.148.10.147

🇪🇬 41.128.181.199

🇧🇷 205.210.31.205

🇨🇱 200.89.69.247

🇪🇸 196.196.150.6

🇺🇸 193.34.72.243

🇺🇸 193.34.72.230

🇺🇸 193.34.72.24

🇺🇸 185.223.152.64