JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.138.208

45.154.138.208 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 1%: ?

ISP	VPN Consumer Marseille, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.138.208

Whois 45.154.138.208

IP Abuse Reports for 45.154.138.208:

This IP address has been reported a total of 107 times from 45 distinct sources. 45.154.138.208 was first reported on December 23rd 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-06-08 23:45:48 (3 weeks ago)	Aggressive web search of vulnerable pages: /wp-admin/css/colors/blue/ahax.php /.well-known/admin.php ... show more Aggressive web search of vulnerable pages: /wp-admin/css/colors/blue/ahax.php /.well-known/admin.php /wp-includes/assets/file.php /cgi-bin/inde ... show less	Web App Attack
🇫🇷 Octopuce	2026-05-05 20:58:24 (2 months ago)	Aggressive web search of vulnerable pages: /ALFA_DATA/alfacgiapi/ /wp-includes/assets/wp-includes/as ... show more Aggressive web search of vulnerable pages: /ALFA_DATA/alfacgiapi/ /wp-includes/assets/wp-includes/assets/ /blog/ /include/ /file/ /images/news_ ... show less	Web App Attack
🇬🇧 consul.to	2026-04-23 05:02:53 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-04-15 10:43:24 (2 months ago)	(wordpress) Failed wordpress login from 45.154.138.208 (FR/France/-)	Brute-Force
🇨🇭 backslash	2026-04-02 19:36:01 (3 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-02 08:30:56 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 45.154.138.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.154.138.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 04:30:52.184989 2026] [security2:error] [pid 10114:tid 10114] [client 45.154.138.208:45961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "friendlyfarm4fun.com"] [uri "/.env"] [unique_id "ac4pPINEm-GWpFt-taWydQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-03-16 15:57:52 (3 months ago)	Web vulnerability probing: /.well-known/buy.php	Web App Attack
🇳🇿 Antinson	2026-03-16 00:11:03 (3 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇫🇷 Octopuce	2026-03-15 18:10:32 (3 months ago)	Aggressive web search of vulnerable pages: /.well-known/pki-validation/install.php /wp-admin/js/abou ... show more Aggressive web search of vulnerable pages: /.well-known/pki-validation/install.php /wp-admin/js/about.php /wp-includes/pomo/index.php /wp-conte ... show less	Web App Attack
🇫🇷 dynamix	2026-03-15 00:20:52 (3 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 mnsf	2026-02-13 04:05:13 (4 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇬🇧 Swiptly	2026-02-08 00:13:24 (4 months ago)	Excessive 403/404/405 PHP/CMS errors from scanning or broken bots ...	Web App Attack
🇺🇸 TPI-Abuse	2026-02-05 09:58:45 (5 months ago)	(mod_security) mod_security (id:240000) triggered by 45.154.138.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 45.154.138.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 04:58:40.732712 2026] [security2:error] [pid 29103:tid 29103] [client 45.154.138.208:55025] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|jerryhazlett.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "jerryhazlett.com"] [uri "/images/stories/themes.php"] [unique_id "aYRp0JP2AAQknDdL0iWiQQAAADQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2025-12-19 04:31:32 (6 months ago)	Excessive 404/403 errors	Brute-Force
🇳🇿 Antinson	2025-12-16 19:10:54 (6 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.103

🇨🇳 112.49.172.4

🇨🇳 106.75.136.15

🇷🇺 87.251.66.118

🇩🇪 69.5.169.24

🇺🇸 34.21.72.44

🇺🇸 216.180.246.14

🇳🇱 195.178.110.228

🇺🇸 172.203.224.88

🇺🇸 164.92.117.229

🇨🇳 125.69.76.148

🇺🇸 34.182.132.8

🇮🇳 20.244.23.45

🇮🇩 202.51.214.99

🇺🇸 142.93.4.52

🇩🇪 93.152.221.206

🇳🇱 45.148.10.141

🇺🇸 45.43.57.6

🇧🇪 34.156.51.30

🇺🇸 34.136.254.119