JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.138.216

45.154.138.216 was found in our database!

This IP was reported 93 times. Confidence of Abuse is 26%: ?

26%

ISP	VPN Consumer Marseille, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.138.216

Whois 45.154.138.216

IP Abuse Reports for 45.154.138.216:

This IP address has been reported a total of 93 times from 44 distinct sources. 45.154.138.216 was first reported on January 27th 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-06-29 14:40:10 (4 days ago)	Form spam	Web Spam
🇦🇺 MAGIC	2026-06-24 05:24:15 (1 week ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇯🇵 demonsword	2026-06-06 11:35:47 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.expressapisv2.net:443 show less	Open Proxy Port Scan
🇫🇷 Kenshin869	2026-06-05 21:07:41 (4 weeks ago)	Wordpress unauthorized access attempt	Brute-Force
🇫🇷 Octopuce	2026-05-05 22:06:36 (1 month ago)	Aggressive web search of vulnerable pages: /wp-includes/interactivity-api/interactivity-api-class.ph ... show more Aggressive web search of vulnerable pages: /wp-includes/interactivity-api/interactivity-api-class.php /wp-includes/l10n/class-wp-widddget-pages ... show less	Web App Attack
🇳🇱 Site.eu	2026-05-02 06:32:28 (2 months ago)	Excessive 404/403 errors	Brute-Force
🇨🇭 zynex	2026-04-23 13:56:42 (2 months ago)	URL Probing: /ahax.php	Web App Attack
🇬🇧 consul.to	2026-04-23 05:49:51 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-04-02 19:38:28 (3 months ago)	(mod_security) mod_security (id:234930) triggered by 45.154.138.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:234930) triggered by 45.154.138.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 15:38:22.738877 2026] [security2:error] [pid 32283:tid 32283] [client 45.154.138.216:59873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|virtualmediamasters.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "virtualmediamasters.net"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ac7Frthoi-0ENEh7jGloNgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-02 08:38:11 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 45.154.138.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.154.138.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 04:38:04.457320 2026] [security2:error] [pid 19717:tid 19717] [client 45.154.138.216:53327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chefmarcelcooks.com"] [uri "/.env"] [unique_id "ac4q7FN4Ubt7RIyhNNDL_gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-03-16 00:11:03 (3 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇫🇷 Octopuce	2026-03-15 19:02:17 (3 months ago)	Aggressive web search of vulnerable pages: /bless.php /lock.php /tiny.php /themes.php /wp-good.php / ... show more Aggressive web search of vulnerable pages: /bless.php /lock.php /tiny.php /themes.php /wp-good.php /ioxi-o.php /wp.php /about.php /adminfuns.ph ... show less	Web App Attack
🇫🇷 dynamix	2026-03-15 00:23:17 (3 months ago)	Multiple WAF Violations	Web App Attack
🇮🇪 Jim Keir	2026-03-13 20:30:30 (3 months ago)	2026-03-13 20:30:30 45.154.138.216 File scanning, blocking 45.154.138.216 for 5 minutes	Web App Attack
🇫🇷 dynamix	2026-02-12 09:36:44 (4 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 114.218.57.21

🇹🇷 91.230.149.123

🇩🇪 57.129.115.253

🇲🇽 187.241.42.13

🇮🇳 182.19.35.57

🇺🇸 173.239.211.96

🇮🇳 172.70.219.85

🇨🇳 121.229.13.210

🇮🇳 119.18.48.74

🇮🇩 103.158.121.151

🇧🇬 79.124.60.146

🇳🇱 45.198.224.244

🇩🇪 2a04:4e40:e000:0:1c5:7f3c:a9ab:b5c4

🇸🇪 170.168.30.183

🇰🇪 102.210.149.236

🇩🇪 95.90.13.168

🇪🇸 87.219.114.141

🇪🇸 85.192.71.77

🇵🇰 72.255.33.72

🇺🇸 70.120.203.193