JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.138.193

45.154.138.193 was found in our database!

This IP was reported 116 times. Confidence of Abuse is 51%: ?

51%

ISP	VPN Consumer Marseille, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.138.193

Whois 45.154.138.193

IP Abuse Reports for 45.154.138.193:

This IP address has been reported a total of 116 times from 49 distinct sources. 45.154.138.193 was first reported on January 2nd 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-18 13:50:15 (4 days ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-07-17 01:56:28 (5 days ago)	[redacted] 45.154.138.193 - - [17/Jul/2026:03:56:21 +0200] "GET /wp-admin/chosen.php HTTP/1.1" 404 2 ... show more [redacted] 45.154.138.193 - - [17/Jul/2026:03:56:21 +0200] "GET /wp-admin/chosen.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" [redacted] 45.154.138.193 - - [17/Jul/2026:03:56:22 +0200] "GET /images/admin.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" [redacted] 45.154.138.193 - - [17/Jul/2026:03:56:22 +0200] "GET /wp-includes/admin.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" [redacted] 45.154.138.193 - - [17/Jul/2026:03:56:23 +0200] "GET /wp-admin/function.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" [redacted] 45.154.138.193 - - [17/Jul/2026:03:56:23 +0200] "GET /wp-admin/js/wp-login.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/201001 ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-07-16 09:31:50 (6 days ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-07-16 08:52:57 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 ghostwarriors	2026-07-16 04:50:22 (6 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-07-16 01:05:13 (6 days ago)	HTTP vulnerability scanning	Web App Attack
🇨🇭 backslash	2026-07-15 19:12:00 (6 days ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇫🇷 Octopuce	2026-07-15 16:56:40 (6 days ago)	Aggressive web search of vulnerable pages: /install.php /inputs.php /style2.php /simple.php /chosen. ... show more Aggressive web search of vulnerable pages: /install.php /inputs.php /style2.php /simple.php /chosen.php /bypass.php /config.php /themes.php /ad ... show less	Web App Attack
🇬🇷 setupgr	2026-06-22 17:15:03 (4 weeks ago)	(mod_security) mod_security (id:900001) triggered by 45.154.138.193 (FR/France/Provence-Alpes-CÃ´te ... show more (mod_security) mod_security (id:900001) triggered by 45.154.138.193 (FR/France/Provence-Alpes-CÃ´te dAzur/Marseille/-/[AS206092 SECFIREWALLAS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 22 20:15:02.889500 2026] [security2:error] [pid 1934813:tid 1934929] [client 45.154.138.193:59321] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: babis.photo"] [severity "CRITICAL"] [tag "security"] [hostname "babis.photo"] [uri "/wp-login.php"] [unique_id "ajltlvVHAYoCTqtXWiWxKQAAAIc"], referer: https://babis.photo/wp-login.php?action=register show less	Port Scan
🇦🇺 oncord	2026-06-16 14:06:18 (1 month ago)	Form spam	Web Spam
🇫🇷 Octopuce	2026-06-08 23:45:08 (1 month ago)	Aggressive web search of vulnerable pages: /wp-includes/rest-api/about.php /css/css.php /init.php /w ... show more Aggressive web search of vulnerable pages: /wp-includes/rest-api/about.php /css/css.php /init.php /wp-admin/user/wp-login.php /autoload_classma ... show less	Web App Attack
🇯🇵 demonsword	2026-06-06 12:06:59 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.expressapisv2.net:443 show less	Open Proxy Port Scan
🇨🇳 Zhengka.net	2026-06-05 18:08:52 (1 month ago)	zhengka.net security honeypot hit; jail=zhengka.net_honeypot; ip=45.154.138.193	Port Scan Web App Attack
🇫🇷 Octopuce	2026-05-08 06:12:37 (2 months ago)	Aggressive web search of vulnerable pages: /cgi-bin/ /wp-admin/js/ /wp-includes/js/jquery/ /wp-inclu ... show more Aggressive web search of vulnerable pages: /cgi-bin/ /wp-admin/js/ /wp-includes/js/jquery/ /wp-includes/block-supports/ /wp-admin/network/ /wp- ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-27 05:38:23 (2 months ago)	(mod_security) mod_security (id:222160) triggered by 45.154.138.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:222160) triggered by 45.154.138.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 01:38:16.134408 2026] [security2:error] [pid 8315:tid 8315] [client 45.154.138.193:34965] ModSecurity: Access denied with code 403 (phase 1). String match "wp-content/plugins/wp-easycart/inc/admin/phpinfo.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6347"] [id "222160"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in The EasyCart plugin before 2.0.6 for WordPress (CVE-2014-4942)\|\|telecomtrainers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "telecomtrainers.com"] [uri "/wp-content/plugins/wp-easycart/inc/admin/phpinfo.php"] [unique_id "ae72SOURkusFgf1O3WFdFQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 117.99.98.247

🇹🇼 198.235.24.103

🇵🇱 176.53.159.197

🇩🇪 69.5.169.253

🇺🇸 64.31.55.22

🇺🇸 216.126.227.119

🇺🇸 172.212.200.29

🇩🇪 167.94.146.38

🇺🇸 130.131.233.88

🇵🇰 103.179.241.6

🇳🇱 45.148.10.157

🇺🇸 20.10.203.190

🇮🇷 2.185.146.159

🇺🇸 193.36.225.73

🇵🇰 153.117.1.26

🇮🇳 152.59.37.219

🇮🇳 124.123.125.62

🇳🇱 91.92.47.173

🇮🇹 88.147.30.59

🇬🇧 85.234.140.159