JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.138.3

45.154.138.3 was found in our database!

This IP was reported 145 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Marseille, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.138.3

Whois 45.154.138.3

IP Abuse Reports for 45.154.138.3:

This IP address has been reported a total of 145 times from 77 distinct sources. 45.154.138.3 was first reported on May 11th 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-19 07:07:22 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-07.45.154.138.3.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-07.45.154.138.3.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇧🇪 cmbplf	2026-06-10 12:50:12 (2 months ago)	206 requests with url.path *config.php	Brute-Force Bad Web Bot
🇷🇺 sms.ru	2026-06-07 14:12:02 (2 months ago)	/wp-admin/css/colors/blue/gold.php	Web App Attack
🇫🇷 Octopuce	2026-06-07 03:49:46 (2 months ago)	Aggressive web search of vulnerable pages: /small.php /wp-includes/js/tinymce/plugins/fullscreen/abo ... show more Aggressive web search of vulnerable pages: /small.php /wp-includes/js/tinymce/plugins/fullscreen/about.php /NewFile.php /wp-content/uploads/ind ... show less	Web App Attack
🇫🇷 dynamix	2026-06-07 00:28:08 (2 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Ba-Yu	2026-06-05 05:07:32 (2 months ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇫🇷 conseilgouz	2026-06-03 18:28:37 (2 months ago)	low-Joomla User : try to access forms...	Hacking
🇫🇷 Octopuce	2026-05-05 20:40:48 (3 months ago)	Aggressive web search of vulnerable pages: /wp-admin/maint/index.php /wp-admin/css/index.php /classw ... show more Aggressive web search of vulnerable pages: /wp-admin/maint/index.php /wp-admin/css/index.php /classwithtostring.php /wp-admin/dropdown.php /aut ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-04-29 22:48:44 (3 months ago)	45.154.138.3 - - [30/Apr/2026:01:48:42 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 404 708 "-" "Go- ... show more 45.154.138.3 - - [30/Apr/2026:01:48:42 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 404 708 "-" "Go-http-client/1.1" 45.154.138.3 - - [30/Apr/2026:01:48:43 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 404 708 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 01:39:20 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.154.138.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.154.138.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 21:39:16.916860 2026] [security2:error] [pid 19385:tid 19385] [client 45.154.138.3:34803] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|budfromkansascitymo.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "budfromkansascitymo.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeQyRBYxauEBkZBmgf3gTAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 00:51:32 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.154.138.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.154.138.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 20:51:24.930050 2026] [security2:error] [pid 22409:tid 22409] [client 45.154.138.3:39109] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|electra-shield.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "electra-shield.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeQnDFjTvu7su5sGqxTE6gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 00:13:21 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.154.138.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.154.138.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 20:13:16.044973 2026] [security2:error] [pid 312108:tid 312108] [client 45.154.138.3:35563] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|geckoturner.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "geckoturner.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeQeHDo5Q17_9uu8JjRZawAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-17 08:57:48 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.154.138.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.154.138.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 04:57:42.213613 2026] [security2:error] [pid 1070738:tid 1070738] [client 45.154.138.3:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail-pmg.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail-pmg.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeH2BnuUYq1v0HUHKOQR9AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kkwemi	2026-04-16 04:21:49 (4 months ago)	Blocked by block-exploit-paths on /vendor/phpunit/phpunit/phpunit.xsd	Bad Web Bot
🇨🇦 Mediashaker	2026-04-08 13:16:17 (4 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 45.154.138.3 (FR/France/ ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 45.154.138.3 (FR/France/-) show less	Port Scan

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.6.226.104

🇺🇸 178.128.188.91

🇧🇷 177.39.231.59

🇯🇵 172.105.199.92

🇫🇮 147.185.133.110

🇨🇳 117.91.186.55

🇷🇴 92.118.39.71

🇷🇺 87.249.62.131

🇨🇳 60.10.50.90

🇷🇺 45.91.64.6

🇺🇸 24.92.48.39

🇨🇳 221.226.80.114

🇿🇦 206.195.138.213

🇹🇼 198.235.24.115

🇧🇷 186.247.108.196

🇺🇸 172.69.132.148

🇺🇸 136.65.125.67

🇺🇸 134.82.186.136

🇫🇷 104.23.225.72

🇺🇸 91.230.168.23