JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.86.202.8

45.86.202.8 was found in our database!

This IP was reported 239 times. Confidence of Abuse is 57%: ?

57%

ISP	VPN Consumer Frankfurt, Germany
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.86.202.8

Whois 45.86.202.8

IP Abuse Reports for 45.86.202.8:

This IP address has been reported a total of 239 times from 101 distinct sources. 45.86.202.8 was first reported on October 4th 2022, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-10 04:19:16 (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇿🇦 Tokolosh Hunters	2026-06-01 16:37:14 (1 week ago)	AutoBlockWindow-Known bad useragent query-2026-06-01 16:37:13	Bad Web Bot
Anonymous	2026-06-01 16:08:21 (1 week ago)	45.86.202.8 - - [01/Jun/2026:18:08:19 +0200] "GET /wp-content/plugins/hello-plus/classes/ehp-social- ... show more 45.86.202.8 - - [01/Jun/2026:18:08:19 +0200] "GET /wp-content/plugins/hello-plus/classes/ehp-social-elf.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 45.86.202.8 - - [01/Jun/2026:18:08:20 +0200] "GET /wp-content/themes/theme-check/theme-check.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 45.86.202.8 - - [01/Jun/2026:18:08:20 +0200] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 45.86.202.8 - - [01/Jun/2026:18:08:20 +0200] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 45.86.202.8 - - [01/Jun/2026:18:08:20 +0200] "GET /wp-content/plugins/dzs-zoomsounds/1877.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack
Anonymous	2026-05-25 15:51:14 (2 weeks ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 45. ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 45.86.202.8 (DE/Germany/-) show less	Brute-Force
🇩🇪 mronet	2026-05-23 09:36:18 (3 weeks ago)	Coordinated attack pattern: 52 IPs from this /24 subnet detected by Fail2Ban (jail: wordpress). Like ... show more Coordinated attack pattern: 52 IPs from this /24 subnet detected by Fail2Ban (jail: wordpress). Likely distributed botnet exit or compromised network. show less	Web App Attack Brute-Force
🇳🇱 Site.eu	2026-05-23 00:22:01 (3 weeks ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Site.eu	2026-05-22 10:39:21 (3 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-05-20 21:09:59 (3 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.86.202.8 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.86.202.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:09:51.527931 2026] [security2:error] [pid 2359:tid 2359] [client 45.86.202.8:30627] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|vaxd.cs-mall.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "vaxd.cs-mall.com"] [uri "/images/stories/themes.php"] [unique_id "ag4jHxQjJxra_OWapnvfmgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-05-19 14:15:10 (3 weeks ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 Octopuce	2026-05-17 06:54:02 (3 weeks ago)	Aggressive web search of vulnerable pages: /wp-includes/id3/license.txt/feed/ /wp-includes/id3/licen ... show more Aggressive web search of vulnerable pages: /wp-includes/id3/license.txt/feed/ /wp-includes/id3/license.txt/wp-json/wp/v2/users/ /wp-includes/id ... show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-13 00:53:50 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/45.86.202.8 2026 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/45.86.202.8 2026-05-12 08:03:00 /nagiosna/auth/forgot_password/en%76;%2f%2e%2e show less	Web App Attack
🇫🇷 SpaceHost-Server	2026-05-12 22:33:27 (1 month ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-05-12 00:34:58 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/45.86.202.8 2026 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/45.86.202.8 2026-05-11 19:17:12 /login/%2e%2e;/env show less	Web App Attack
🇧🇪 cmbplf	2026-05-08 00:43:27 (1 month ago)	2.000 requests with url.path */xmlrpc.php 2.000 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇫🇷 SpaceHost-Server	2026-05-07 22:36:44 (1 month ago)		Brute-Force Web App Attack

Showing 1 to 15 of 239 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.231.193.186

🇺🇸 152.32.182.41

🇷🇴 80.94.92.184

🇹🇼 60.250.246.239

🇩🇪 44.146.45.20

🇺🇸 34.71.209.113

🇩🇪 34.40.71.161

🇺🇸 172.172.30.198

🇮🇹 130.25.53.170

🇨🇳 101.126.55.63

🇨🇳 101.96.230.94

🇩🇪 46.249.99.46

🇨🇳 39.154.7.58

🇨🇦 20.151.217.54

🇺🇸 18.232.11.247

🇺🇸 162.216.149.22

🇨🇳 114.228.0.26

🇯🇵 35.243.104.21

🇻🇳 27.79.40.244

🇧🇴 190.129.122.12