JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.138.98

45.154.138.98 was found in our database!

This IP was reported 185 times. Confidence of Abuse is 47%: ?

47%

ISP	VPN Consumer Marseille, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.138.98

Whois 45.154.138.98

IP Abuse Reports for 45.154.138.98:

This IP address has been reported a total of 185 times from 86 distinct sources. 45.154.138.98 was first reported on January 18th 2023, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 webgobe	2026-07-17 20:43:57 (19 hours ago)	tow-Joomla User : try to access forms...	Hacking
🇪🇸 pipeline.es	2026-07-17 19:55:12 (20 hours ago)	Web scanning / probing for vulnerable paths \| URL: /wp-content/plugins/WordPressCore/gecko.php \| Evi ... show more Web scanning / probing for vulnerable paths \| URL: /wp-content/plugins/WordPressCore/gecko.php \| Evidence: mundoteatro.es 45.154.138.98 - - [17/Jul/2026:21:52:44 +0200] \"GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1\" 404 240 \"-\" \"Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0\" GEOIP_COUNTRY_CODE=FR \| ASN: F.n.s. Holdings Limited \| Country: FR show less	Port Scan Web App Attack
🇫🇷 dynamix	2026-07-15 23:47:22 (2 days ago)	Multiple WAF Violations	Web App Attack
🇿🇦 conure	2026-07-15 20:18:51 (2 days ago)	csagent: score 15.2: php 404 x3, 404 noise floor x3, webshell name x1; 1 domain(s) in 0s	Web App Attack
Anonymous	2026-07-15 20:17:37 (2 days ago)	[redacted] 45.154.138.98 - - [15/Jul/2026:22:17:28 +0200] "GET /wp-admin/css/chosen.php HTTP/1.1" 40 ... show more [redacted] 45.154.138.98 - - [15/Jul/2026:22:17:28 +0200] "GET /wp-admin/css/chosen.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" [redacted] 45.154.138.98 - - [15/Jul/2026:22:17:29 +0200] "GET /css/adminfusm.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" [redacted] 45.154.138.98 - - [15/Jul/2026:22:17:30 +0200] "GET /wp-admin/includes/admin.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" [redacted] 45.154.138.98 - - [15/Jul/2026:22:17:30 +0200] "GET /wp-admin/media-new.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" [redacted] 45.154.138.98 - - [15/Jul/2026:22:17:32 +0200] "GET /admin/install.php H ... show less	Hacking Web App Attack
🇩🇪 YF	2026-06-19 22:20:24 (4 weeks ago)	Environment file probe	Web App Attack
🇫🇷 geot	2026-06-19 12:00:12 (4 weeks ago)	GET /package.json HTTP/1.1 GET /.env.local HTTP/1.0 GET /.env.save HTTP/1.0 GET /backup/.env HTTP/1. ... show more GET /package.json HTTP/1.1 GET /.env.local HTTP/1.0 GET /.env.save HTTP/1.0 GET /backup/.env HTTP/1.0 GET /.env.production HTTP/1.1 GET /config.ini HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-06-19 10:07:14 (4 weeks ago)	45.154.138.98 - - [19/Jun/2026:13:06:29 +0300] "GET /.env.dist HTTP/1.1" 403 248 45.154.138.98 - - [ ... show more 45.154.138.98 - - [19/Jun/2026:13:06:29 +0300] "GET /.env.dist HTTP/1.1" 403 248 45.154.138.98 - - [19/Jun/2026:13:06:47 +0300] "GET /.env~ HTTP/1.1" 403 244 45.154.138.98 - - [19/Jun/2026:13:07:13 +0300] "GET /web.config HTTP/1.1" 404 256 show less	Bad Web Bot
Anonymous	2026-06-19 03:32:56 (4 weeks ago)	45.154.138.98 - - [19/Jun/2026:03:32:55 +0000] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/ ... show more 45.154.138.98 - - [19/Jun/2026:03:32:55 +0000] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15" "-" "91.98.135.170" ... show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Enno	2026-06-18 22:31:20 (4 weeks ago)	P04::Fail2Ban: automated bot scanning / credential probing detected.	Web App Attack Bad Web Bot
🇮🇹 [email protected]	2026-06-09 18:58:21 (1 month ago)	45.154.138.98 - - [09/Jun/2026:20:56:41 +0200] "GET /wp-includes/css/dist/ HTTP/1.1" 301 761 "-" "Mo ... show more 45.154.138.98 - - [09/Jun/2026:20:56:41 +0200] "GET /wp-includes/css/dist/ HTTP/1.1" 301 761 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"45.154.138.98 - - [09/Jun/2026:20:56:41 +0200] "GET /wp-content/themes/twentynineteen/sass/site/ HTTP/1.1" 301 805 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"45.154.138.98 - - [09/Jun/2026:20:56:42 +0200] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" show less	Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-06-09 17:50:49 (1 month ago)	Multiple WAF Violations	Web App Attack
🇿🇦 Tokolosh Hunters	2026-06-03 09:15:19 (1 month ago)	AutoBlockWindow-Known bad useragent query-2026-06-03 09:15:18	Bad Web Bot
🇨🇭 Origon	2026-06-03 01:08:26 (1 month ago)	http-backdoors-attempts - IP: 45.154.138.98 - time="2026-06-03T03:08:26+02:00" level=info msg="(555 ... show more http-backdoors-attempts - IP: 45.154.138.98 - time="2026-06-03T03:08:26+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-backdoors-attempts by ip 45.154.138.98 (FR/206092) : 4h ban on Ip 45.154.138.98" module=db show less	Web App Attack
🇫🇷 Octopuce	2026-05-07 23:59:50 (2 months ago)	Aggressive web search of vulnerable pages: /wp-content/classwithtostring.php /.well-known/acme-chall ... show more Aggressive web search of vulnerable pages: /wp-content/classwithtostring.php /.well-known/acme-challenge/iR7SzrsOUEP.php /wp-includes/customize ... show less	Web App Attack

Showing 1 to 15 of 185 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.137

🇨🇴 181.59.2.172

🇹🇭 125.25.87.185

🇯🇵 92.203.165.140

🇩🇪 80.158.109.51

🇮🇳 43.248.243.57

🇺🇦 31.42.184.154

🇺🇸 20.127.125.129

🇧🇩 203.76.222.144

🇧🇷 177.10.117.114

🇺🇸 162.253.42.116

🇭🇰 111.68.6.142

🇺🇸 103.143.10.140

🇮🇳 103.86.180.10

🇳🇱 77.239.124.237

🇺🇸 38.147.106.235

🇬🇧 35.203.210.9

🇺🇸 35.172.137.69

🇬🇧 5.226.140.69

🇷🇸 212.200.162.174