JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.86.202.49

45.86.202.49 was found in our database!

This IP was reported 248 times. Confidence of Abuse is 51%: ?

51%

ISP	VPN Consumer Frankfurt, Germany
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.86.202.49

Whois 45.86.202.49

IP Abuse Reports for 45.86.202.49:

This IP address has been reported a total of 248 times from 109 distinct sources. 45.86.202.49 was first reported on February 20th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Major Hostility	2026-06-05 18:07:08 (1 week ago)	"GET /bless.php HTTP/1.1" 404 "GET /O-Simple.php HTTP/1.1" 404 "GET /lock360.php HTTP/1.1" 404 "GET ... show more "GET /bless.php HTTP/1.1" 404 "GET /O-Simple.php HTTP/1.1" 404 "GET /lock360.php HTTP/1.1" 404 "GET /zwso.php HTTP/1.1" 404 "GET /chosen.php HTTP/1.1" 404 "GET /about.php HTTP/1.1" 404 "GET /admin.php HTTP/1.1" 404 "GET /mah.php HTTP/1.1" 404 "GET /.wp/wso.php HTTP/1.1" 404 "GET /core.php HTTP/1.1" 404 "GET /robots.php HTTP/1.1" 404 "GET /inputs.php HTTP/1.1" 404 "GET /mini.php HTTP/1.1" 404 "GET /goods.php HTTP/1.1" 404 "GET /file5.php HTTP/1.1" 404 "GET /ahax.php HTTP/1.1" 404 "GET /f35.php HTTP/1.1" 404 "GET /simple.php HTTP/1.1" 404 "GET /amax.php HTTP/1.1" 404 "GET /update/f35.php HTTP/1.1" 404 "GET /wp-content/hello.php HTTP/1.1" 404 "GET % show less	Web App Attack
🇬🇧 consul.to	2026-06-02 13:31:55 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇿🇦 Tokolosh Hunters	2026-06-01 16:07:14 (1 week ago)	AutoBlockWindow-Known bad useragent query-2026-06-01 16:07:13	Bad Web Bot
🇯🇵 SentinalX by uzumaru	2026-05-30 07:23:18 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.ipvanish.com:443 show less	Open Proxy Port Scan
🇩🇪 McClay	2026-05-26 08:18:10 (2 weeks ago)	Illegal access attempt:45.86.202.49 - - [26/May/2026:10:18:09 +0200] "GET /.git/config HTTP/1.1" 404 ... show more Illegal access attempt:45.86.202.49 - - [26/May/2026:10:18:09 +0200] "GET /.git/config HTTP/1.1" 404 1051 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇩🇪 mronet	2026-05-23 09:18:32 (3 weeks ago)	Coordinated attack pattern: 52 IPs from this /24 subnet detected by Fail2Ban (jail: wordpress). Like ... show more Coordinated attack pattern: 52 IPs from this /24 subnet detected by Fail2Ban (jail: wordpress). Likely distributed botnet exit or compromised network. show less	Web App Attack Brute-Force
🇫🇷 masterguru	2026-05-15 13:15:52 (4 weeks ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)	Hacking
🇨🇳 ThreatBook.io	2026-05-12 22:11:56 (1 month ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/45.86.202.49 2026-0 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/45.86.202.49 2026-05-12 08:02:58 /nagiosna/auth/forgot_password/..;/env 2026-05-12 08:02:58 /nagiosna/auth/forgot_password/api/%2e%2e;/env show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-11 22:13:32 (1 month ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/45.86.202.49 2026-0 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/45.86.202.49 2026-05-11 01:56:01 /help/user/project/clusters/index.md/../../../actuator 2026-05-11 01:56:02 /help/user/project/clusters/index.md/api/%2e%2e;/actuator show less	Web App Attack
🇫🇷 masterguru	2026-05-11 03:23:30 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 45.86.202.49 (DE/Germany/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 45.86.202.49 (DE/Germany/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇳🇱 Site.eu	2026-05-11 00:36:29 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 Octopuce	2026-05-09 18:29:45 (1 month ago)	Aggressive web search of vulnerable pages: /feed/ /wp-admin/js/wp-conflg.php /wp-includes/assets/hus ... show more Aggressive web search of vulnerable pages: /feed/ /wp-admin/js/wp-conflg.php /wp-includes/assets/husky301.php /wp.php /wp-admin/css/colors/blue ... show less	Web App Attack
🇧🇪 cmbplf	2026-05-07 19:33:57 (1 month ago)	3.000 requests with url.path //xmlrpc.php 2.967 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-05-07 18:42:26 (1 month ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇳🇱 Site.eu	2026-05-05 03:02:54 (1 month ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 248 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.32

🇧🇷 177.105.190.18

🇧🇷 148.227.123.114

🇧🇩 114.130.85.36

🇮🇳 59.145.160.158

🇨🇳 223.167.206.221

🇺🇸 205.210.31.51

🇸🇬 172.253.211.17

🇭🇰 154.198.162.75

🇺🇸 147.185.132.64

🇫🇮 77.105.161.120

🇺🇸 66.132.186.190

🇬🇧 35.203.210.102

🇺🇸 34.174.133.191

🇮🇷 2.188.239.50

🇺🇸 216.180.246.66

🇮🇳 182.95.91.86

🇻🇪 179.63.37.20

🇺🇸 174.138.87.36

🇭🇰 172.253.237.26