JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.98.108

45.154.98.108 was found in our database!

This IP was reported 430 times. Confidence of Abuse is 100%: ?

100%

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Hostname(s)	45.154.98.108.powered.by.rdp.sh
Domain Name	as210558.net
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.98.108

Whois 45.154.98.108

IP Abuse Reports for 45.154.98.108:

This IP address has been reported a total of 430 times from 137 distinct sources. 45.154.98.108 was first reported on September 19th 2022, and the most recent report was 5 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 dominioz	2026-06-25 19:48:21 (5 minutes ago)	2026-06-25 14:28:48 GET /xmlrpc.php rsd - 45.154.98.108 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64 ... show more 2026-06-25 14:28:48 GET /xmlrpc.php rsd - 45.154.98.108 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 301 579 2026-06-25 19:47:23 GET /xmlrpc.php rsd - 45.154.98.108 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 301 579 2026-06-25 19:47:23 GET /xmlrpc.php rsd - 45.154.98.108 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 301 579 ... show less	Web App Attack
Anonymous	2026-06-25 19:43:25 (10 minutes ago)	45.154.98.108 - - [25/Jun/2026:21:43:24 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 ... show more 45.154.98.108 - - [25/Jun/2026:21:43:24 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.154.98.108 - - [25/Jun/2026:21:43:24 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.154.98.108 - - [25/Jun/2026:21:43:24 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.154.98.108 - - [25/Jun/2026:21:43:24 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.154.98.108 - - [25/Jun/2026:21:43:25 +0200] "GET //website/wp-includes/wlwmanifest.xml HTT ... show less	Brute-Force Web App Attack
🇦🇩 bakunin1848	2026-06-25 19:22:04 (32 minutes ago)	Firewall IPS Detection on 25-06-2026 at 21:22:04	Port Scan Exploited Host
🇳🇱 Site.eu	2026-06-25 18:10:03 (1 hour ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 macrob	2026-06-25 17:54:56 (1 hour ago)	2026/06/25 17:54:55 [error] 3958357#3958357: 330435446 access forbidden by rule, client: 45.154.98. ... show more 2026/06/25 17:54:55 [error] 3958357#3958357: 330435446 access forbidden by rule, client: 45.154.98.108, server: binomiotorrido.pt, request: "GET //wp-includes/wlwmanifest.xml HTTP/1.1", host: "binomiotorrido.pt" 2026/06/25 17:54:55 [error] 3958357#3958357: 330435446 access forbidden by rule, client: 45.154.98.108, server: binomiotorrido.pt, request: "GET //xmlrpc.php?rsd HTTP/1.1", host: "binomiotorrido.pt" 2026/06/25 17:54:55 [error] 3958357#3958357: 330435446 access forbidden by rule, client: 45.154.98.108, server: binomiotorrido.pt, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "binomiotorrido.pt" ... show less	Web App Attack
🇩🇪 Kreapptivo	2026-06-25 16:45:50 (3 hours ago)	[25/Jun/2026:18:45:45 +0200] Web-Request: "GET /wp-includes/wlwmanifest.xml", User-Agent: "Mozilla/5 ... show more [25/Jun/2026:18:45:45 +0200] Web-Request: "GET /wp-includes/wlwmanifest.xml", User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-25 16:41:27 (3 hours ago)	Web vulnerability probing: //wordpress/wp-includes/wlwmanifest.xml	Web App Attack
🇺🇸 lostswordfish.com	2026-06-25 16:16:03 (3 hours ago)	Wordfence waf block on lostswordfish	Web App Attack
🇳🇱 BlueWire Hosting	2026-06-25 16:02:50 (3 hours ago)	Probing websites for vulnerabilities	Web App Attack
🇪🇸 librebit	2026-06-25 14:57:02 (4 hours ago)	Brute force	Brute-Force
🇯🇵 HeliJP	2026-06-25 14:45:59 (5 hours ago)	2026-06-25T14:21:50Z - Recognized attacks\bad behavior from IP address 45.154.98.108 on port 443\80 ... show more 2026-06-25T14:21:50Z - Recognized attacks\bad behavior from IP address 45.154.98.108 on port 443\80 (20 daily hits): client denied by server configuration show less	Port Scan Hacking SQL Injection Brute-Force Web App Attack
🇩🇪 pltcldvlpr	2026-06-25 14:29:54 (5 hours ago)	CMS/framework probe: 45.154.98.108 - - [25/Jun/2026:16:29:53 +0200] "GET //wp-includes/wlwmanifest.x ... show more CMS/framework probe: 45.154.98.108 - - [25/Jun/2026:16:29:53 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 10734 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" asn=210558 org="1337 Services GmbH" country=NL ... show less	Web App Attack
🇧🇷 Halux	2026-06-25 13:42:54 (6 hours ago)	45.154.98.108 Web Application Firewall multiple violations	Hacking Web App Attack
🇩🇪 pscriptos	2026-06-25 13:01:52 (6 hours ago)	{"ClientAddr":"45.154.98.108:53174","ClientHost":"45.154.98.108","ClientPort":"53174","ClientUsernam ... show more {"ClientAddr":"45.154.98.108:53174","ClientHost":"45.154.98.108","ClientPort":"53174","ClientUsername":"-","DownstreamContentSize":416,"DownstreamStatus":403,"Duration":416515399,"OriginContentSize":416,"OriginDuration":411516622,"OriginStatus":403,"Overhead":4998777,"RequestAddr":"www.cleveradmin.de","RequestContentSize":488,"RequestCount":1413827,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-06-25T15:01:50.664010405+02:00","StartUTC":"2026-06-25T13:01:50.664010405Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-25T15:01:51+02:00"} {"ClientAddr":"45.154.98.108:53174","ClientHost":"45.154.98.108"," ... show less	Brute-Force Web App Attack
🇩🇪 on-com	2026-06-25 13:00:06 (6 hours ago)	URL scan	Brute-Force Web App Attack

Showing 1 to 15 of 430 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 114.130.85.36

🇦🇷 186.13.24.118

🇮🇩 182.13.96.107

🇺🇸 173.244.60.241

🇸🇬 68.178.172.205

🇫🇷 51.254.59.113

🇨🇦 51.79.99.235

🇸🇬 45.78.198.199

🇬🇧 2a06:4880:6000::87

🇺🇸 216.25.89.81

🇺🇸 207.46.13.107

🇪🇹 196.189.126.17

🇺🇸 172.66.44.183

🇺🇸 162.216.149.124

🇺🇸 147.185.132.217

🇨🇳 36.141.79.94

🇧🇪 198.235.24.214

🇯🇵 163.44.101.215

🇺🇸 158.94.187.12

🇸🇬 103.187.146.90