JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.138.59

45.154.138.59 was found in our database!

This IP was reported 221 times. Confidence of Abuse is 39%: ?

39%

ISP	VPN Consumer Marseille, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.138.59

Whois 45.154.138.59

IP Abuse Reports for 45.154.138.59:

This IP address has been reported a total of 221 times from 102 distinct sources. 45.154.138.59 was first reported on January 18th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-08-10 14:29:21 (1 week ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇪🇸 librebit	2026-08-05 06:25:10 (2 weeks ago)	Brute force	Brute-Force
🇩🇪 big-cloud.nl	2026-08-04 06:25:16 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 netclix.gr	2026-08-04 04:43:51 (2 weeks ago)	(wordpress) Failed wordpress login from 45.154.138.59 (FR/France/-): (CF_ENABLE)	Brute-Force
🇫🇮 Rexikon	2026-08-04 02:30:09 (2 weeks ago)	45.154.138.59 - - [04/Aug/2026:04:29:36 +0200] "POST /wp-login.php HTTP/1.1" 200 5091 "-" "Mozilla/5 ... show more 45.154.138.59 - - [04/Aug/2026:04:29:36 +0200] "POST /wp-login.php HTTP/1.1" 200 5091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.138.59 - - [04/Aug/2026:04:29:43 +0200] "POST /wp-login.php HTTP/1.1" 200 5091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.154.138.59 - - [04/Aug/2026:04:29:51 +0200] "POST /wp-login.php HTTP/1.1" 200 5090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36" 45.154.138.59 - - [04/Aug/2026:04:30:01 +0200] "POST /wp-login.php HTTP/1.1" 200 5090 "-" "Mozilla/5.0 (Linux; Android 11; Nokia G50) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.61 Mobile Safari/537.36" 45.154.138.59 - - [04/Aug/2026:04:30:09 +0200] "POST /wp-login.php HTTP/1.1" 200 5089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-08-01 22:49:06 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.154.138.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.154.138.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 18:49:00.581470 2026] [security2:error] [pid 2261362:tid 2261362] [client 45.154.138.59:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webfrog.ws"] [uri "/.env"] [unique_id "am533I2h4QsuBGts7htClgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 pipeline.es	2026-07-17 19:55:11 (1 month ago)	Web scanning / probing for vulnerable paths \| URL: /nation.php \| Evidence: mundoteatro.es 45.154.138 ... show more Web scanning / probing for vulnerable paths \| URL: /nation.php \| Evidence: mundoteatro.es 45.154.138.59 - - [17/Jul/2026:21:51:52 +0200] \"GET /nation.php HTTP/1.1\" 404 208 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36\" GEOIP_COUNTRY_CODE=FR \| ASN: F.n.s. Holdings Limited \| Country: FR show less	Port Scan Web App Attack
🇫🇷 dynamix	2026-07-17 16:59:39 (1 month ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-07-16 00:05:44 (1 month ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/ioxi/ /blog/wp-content/ /wp-content/t ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/ioxi/ /blog/wp-content/ /wp-content/themes/astra/inc/ /wp-content/plugins/ccx/ / ... show less	Web App Attack
Anonymous	2026-07-13 18:57:05 (1 month ago)	ZUOBDE WEBFORM SPAM 45.154.138.59 (45.154.138.59)	Web Spam
🇫🇷 masterguru	2026-06-19 21:01:39 (2 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-195)	Hacking Bad Web Bot
🇫🇷 geot	2026-06-19 12:00:24 (2 months ago)	GET /config.json HTTP/1.1 GET /app/.env HTTP/1.1	Hacking Web App Attack
Anonymous	2026-06-19 10:06:50 (2 months ago)	45.154.138.59 - - [19/Jun/2026:13:06:41 +0300] "GET /load.environment.php HTTP/1.1" 404 266 45.154.1 ... show more 45.154.138.59 - - [19/Jun/2026:13:06:41 +0300] "GET /load.environment.php HTTP/1.1" 404 266 45.154.138.59 - - [19/Jun/2026:13:06:46 +0300] "GET /.env_develop HTTP/1.1" 403 251 45.154.138.59 - - [19/Jun/2026:13:06:49 +0300] "GET /.env.local HTTP/1.1" 403 249 show less	Bad Web Bot
🇩🇪 MusicLibrary	2026-06-19 03:08:22 (2 months ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇮🇹 [email protected]	2026-06-09 18:59:45 (2 months ago)	45.154.138.59 - - [09/Jun/2026:20:59:36 +0200] "GET /wp-content/uploads/settings.php HTTP/1.1" 404 7 ... show more 45.154.138.59 - - [09/Jun/2026:20:59:36 +0200] "GET /wp-content/uploads/settings.php HTTP/1.1" 404 790 "http://intoino.it/wp-content/uploads/settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" show less	Brute-Force Web App Attack

Showing 1 to 15 of 221 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 164.92.109.155

🇧🇩 103.158.132.161

🇨🇳 123.174.189.25

🇺🇸 107.175.244.79

🇳🇱 45.148.10.152

🇩🇪 152.53.185.81

🇨🇳 117.183.139.90

🇫🇷 65.111.31.240

🇮🇳 103.203.210.23

🇳🇴 87.120.104.29

🇸🇪 84.13.145.234

🇧🇬 79.124.62.126

🇫🇷 65.111.31.22

🇮🇷 2.180.32.104

🇨🇳 218.202.143.68

🇨🇳 117.34.125.173

🇫🇷 104.207.62.41

🇻🇳 14.225.217.138

🇱🇹 213.176.26.41

🇺🇸 109.105.210.102