JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.98.56

45.154.98.56 was found in our database!

This IP was reported 278 times. Confidence of Abuse is 97%: ?

97%

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Hostname(s)	194.26.192.123.powered.by.amazon.com
Domain Name	as210558.net
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.98.56

Whois 45.154.98.56

IP Abuse Reports for 45.154.98.56:

This IP address has been reported a total of 278 times from 134 distinct sources. 45.154.98.56 was first reported on March 30th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-05-16 18:22:55 (3 weeks ago)	ICS Labs identified 45.154.98.56 as a malicious indicator from threat intelligence.	Hacking
🇮🇩 zam	2026-05-01 23:32:16 (1 month ago)	45.154.98.56 - - [01/May/2026:23:32:14 +0000] "POST /wp-plain.php HTTP/1.1" 301 277	Web App Attack
🇩🇪 itsolon	2026-05-01 22:45:27 (1 month ago)	[02/May/2026:00:45:24 +0200] 17776755243.643579 45.154.98.56 57755 217.154.7.177 443 [02/May/2026:00 ... show more [02/May/2026:00:45:24 +0200] 17776755243.643579 45.154.98.56 57755 217.154.7.177 443 [02/May/2026:00:45:25 +0200] 177767552578.991292 45.154.98.56 61048 217.154.7.177 80 [02/May/2026:00:45:24 +0200] 177767552483.159944 45.154.98.56 57759 217.154.7.177 443 [02/May/2026:00:45:25 +0200] 17776755258.241668 45.154.98.56 49515 217.154.7.177 443 [02/May/2026:00:45:25 +0200] 177767552594.524904 45.154.98.56 57755 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-05-01 22:42:41 (1 month ago)		Brute-Force Web App Attack
🇩🇪 macrob	2026-05-01 21:14:56 (1 month ago)	2026/05/01 21:14:55 [error] 3596562#3596562: 193443807 access forbidden by rule, client: 45.154.98. ... show more 2026/05/01 21:14:55 [error] 3596562#3596562: 193443807 access forbidden by rule, client: 45.154.98.56, server: binixo.com.ar, request: "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0", host: "binixo.com.ar", referrer: "www.google.com" 2026/05/01 21:14:55 [error] 3596562#3596562: 193443811 access forbidden by rule, client: 45.154.98.56, server: binixo.com.ar, request: "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0", host: "binixo.com.ar", referrer: "www.google.com" 2026/05/01 21:14:55 [error] 3596562#3596562: 193443808 access forbidden by rule, client: 45.154.98.56, server: binixo.com.ar, request: "GET /wp-content/plugins/fix/up.php HTTP/2.0", host: "binixo.com.ar" ... show less	Web App Attack
Anonymous	2026-05-01 20:40:35 (1 month ago)	45.154.98.56 - - [02/May/2026:04:40:30 +0800] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 1420 ... show more 45.154.98.56 - - [02/May/2026:04:40:30 +0800] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 14200 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.154.98.56 - - [02/May/2026:04:40:30 +0800] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 404 14201 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.56 - - [02/May/2026:04:40:30 +0800] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 404 14200 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.56 - - [02/May/2026:04:40:30 +0800] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 14200 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gec ... show less	Bad Web Bot Web App Attack
🇦🇺 clapper	2026-05-01 19:17:36 (1 month ago)	(mod_security) mod_security (id:980001) triggered by 45.154.98.56 (NL/Netherlands/194.26.192.123.pow ... show more (mod_security) mod_security (id:980001) triggered by 45.154.98.56 (NL/Netherlands/194.26.192.123.powered.by.amazon.com): 3 in the last 3600 secs; ID: LUC show less	Brute-Force Bad Web Bot
🇧🇪 cmbplf	2026-05-01 16:39:45 (1 month ago)	228 requests with url.path .alfa 113 requests with url.path /wp-plain.php	Brute-Force Bad Web Bot
🇦🇺 clapper	2026-05-01 15:06:59 (1 month ago)	(mod_security) mod_security (id:980001) triggered by 45.154.98.56 (NL/Netherlands/194.26.192.123.pow ... show more (mod_security) mod_security (id:980001) triggered by 45.154.98.56 (NL/Netherlands/194.26.192.123.powered.by.amazon.com): 5 in the last 3600 secs; ID: Clar show less	Brute-Force Bad Web Bot
🇫🇷 dynamix	2026-05-01 14:47:41 (1 month ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Ba-Yu	2026-05-01 14:46:39 (1 month ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 ramazan	2026-05-01 13:43:11 (1 month ago)	Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /hdmyecxl.php?Fox=d3wL7 /plugins/content/apismtp/apismtp.p ... show more Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /hdmyecxl.php?Fox=d3wL7 /plugins/content/apismtp/apismtp.php?test=hello /wp-content/plugins/apikey/apikey.php.suspected?test=hello /wp-content/plugins/apikey/apikey.php?test=hello /wp-content/plugins/fix/up.php show less	Web App Attack Hacking
🇮🇩 Burayot	2026-05-01 13:42:16 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.154.98.56 (NL/Netherlands/194.26 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.154.98.56 (NL/Netherlands/194.26.192.123.powered.by.amazon.com): 2 in the last 3600 secs show less	Web App Attack
🇦🇺 clapper	2026-05-01 12:27:25 (1 month ago)	(mod_security) mod_security (id:980001) triggered by 45.154.98.56 (NL/Netherlands/194.26.192.123.pow ... show more (mod_security) mod_security (id:980001) triggered by 45.154.98.56 (NL/Netherlands/194.26.192.123.powered.by.amazon.com): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇫🇷 ELYAZ	2026-05-01 11:32:00 (1 month ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 45.154.98.56 (NL/Netherl ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 45.154.98.56 (NL/Netherlands/-): (CF_ENABLE) show less	Port Scan

Showing 1 to 15 of 278 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.233

🇩🇪 165.232.64.223

🇺🇸 162.243.228.110

🇬🇧 159.65.86.3

🇨🇳 144.123.76.216

🇨🇳 106.75.227.248

🇻🇳 103.154.62.14

🇺🇸 64.62.197.61

🇺🇸 64.62.197.59

🇺🇸 52.182.188.239

🇧🇪 34.38.93.241

🇮🇳 182.95.126.42

🇨🇴 181.57.188.197

🇺🇸 147.185.132.213

🇵🇹 109.49.23.192

🇺🇸 64.62.197.58

🇺🇸 64.62.197.57

🇺🇸 52.173.223.131

🇦🇺 51.161.172.164

🇱🇹 45.227.254.170