JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.138.210

45.154.138.210 was found in our database!

This IP was reported 163 times. Confidence of Abuse is 25%: ?

25%

ISP	VPN Consumer Marseille, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.138.210

Whois 45.154.138.210

IP Abuse Reports for 45.154.138.210:

This IP address has been reported a total of 163 times from 71 distinct sources. 45.154.138.210 was first reported on January 17th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-06-22 17:14:43 (1 day ago)	(mod_security) mod_security (id:900001) triggered by 45.154.138.210 (FR/France/Provence-Alpes-CÃ´te ... show more (mod_security) mod_security (id:900001) triggered by 45.154.138.210 (FR/France/Provence-Alpes-CÃ´te dAzur/Marseille/-/[AS206092 SECFIREWALLAS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 22 20:14:42.591331 2026] [security2:error] [pid 1934693:tid 1934793] [client 45.154.138.210:41083] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: babis.photo"] [severity "CRITICAL"] [tag "security"] [hostname "babis.photo"] [uri "/wp-login.php"] [unique_id "ajltgmyIwtP6yf56A0qoBwAAAEU"], referer: https://babis.photo/wp-login.php?action=register show less	Port Scan
🇯🇵 demonsword	2026-06-06 10:54:30 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.expressapisv2.net:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-06-05 08:28:32 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.ipvanish.com:443 show less	Open Proxy Port Scan
🇫🇷 Octopuce	2026-05-10 03:42:53 (1 month ago)	Aggressive web search of vulnerable pages: /bless.php /O-Simple.php /lock360.php /zwso.php /chosen.p ... show more Aggressive web search of vulnerable pages: /bless.php /O-Simple.php /lock360.php /zwso.php /chosen.php /about.php /admin.php /mah.php /.wp/wso. ... show less	Web App Attack
🇬🇧 consul.to	2026-05-06 02:27:27 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-05-06 01:01:25 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 45.154.138.210 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 45.154.138.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 21:01:18.100657 2026] [security2:error] [pid 16285:tid 16285] [client 45.154.138.210:52439] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|michaelhick.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "michaelhick.com"] [uri "/images/stories/themes.php"] [unique_id "afqS3jJjU1hhGvo2KiQFkQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-04-27 03:40:27 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇦🇺 MAGIC	2026-04-26 00:49:05 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇬🇧 consul.to	2026-04-23 05:04:13 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇭 backslash	2026-04-02 19:36:02 (2 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 ph	2026-03-26 09:38:49 (2 months ago)	Bad web bot attempting to run wp-json on non-WP site	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-17 03:29:25 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 45.154.138.210 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 45.154.138.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 23:29:22.313565 2026] [security2:error] [pid 26188:tid 26188] [client 45.154.138.210:27653] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|192.64.150.248\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "192.64.150.248"] [uri "/images/stories/themes.php"] [unique_id "abjKkmi3Jr9rLhJljsR7vAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-03-16 15:55:40 (3 months ago)	Web vulnerability probing: /wp-content/ALFA_DATA/alfacgiapi/bypass.php	Web App Attack
🇫🇷 dynamix	2026-03-15 22:30:25 (3 months ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-03-15 17:35:36 (3 months ago)	Aggressive web search of vulnerable pages: /.well-known/index.php /.well-known/acme-challenge/licens ... show more Aggressive web search of vulnerable pages: /.well-known/index.php /.well-known/acme-challenge/license.php /admin/controller/extension/extension ... show less	Web App Attack

Showing 1 to 15 of 163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:2cc:1::25f

🇲🇾 219.92.184.36

🇭🇰 199.45.155.108

🇨🇱 190.102.240.48

🇨🇳 180.111.30.149

🇭🇰 152.32.174.171

🇨🇦 85.217.149.26

🇺🇸 71.6.232.20

🇸🇪 65.99.181.123

🇺🇸 64.62.197.38

🇺🇸 47.251.123.229

🇺🇸 43.135.174.146

🇺🇸 3.130.168.2

🇺🇸 216.25.89.117

🇹🇷 213.142.151.136

🇨🇦 209.141.162.201

🇭🇰 199.45.155.100

🇳🇴 185.253.97.253

🇳🇱 185.226.197.10

🇳🇱 176.65.148.147