JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.138.59

45.154.138.59 was found in our database!

This IP was reported 221 times. Confidence of Abuse is 46%: ?

46%

ISP	VPN Consumer Marseille, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.138.59

Whois 45.154.138.59

IP Abuse Reports for 45.154.138.59:

This IP address has been reported a total of 221 times from 102 distinct sources. 45.154.138.59 was first reported on January 18th 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-08-10 14:29:21 (6 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇪🇸 librebit	2026-08-05 06:25:10 (1 week ago)	Brute force	Brute-Force
🇩🇪 big-cloud.nl	2026-08-04 06:25:16 (1 week ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 netclix.gr	2026-08-04 04:43:51 (1 week ago)	(wordpress) Failed wordpress login from 45.154.138.59 (FR/France/-): (CF_ENABLE)	Brute-Force
🇫🇮 Rexikon	2026-08-04 02:30:09 (1 week ago)	45.154.138.59 - - [04/Aug/2026:04:29:36 +0200] "POST /wp-login.php HTTP/1.1" 200 5091 "-" "Mozilla/5 ... show more 45.154.138.59 - - [04/Aug/2026:04:29:36 +0200] "POST /wp-login.php HTTP/1.1" 200 5091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.138.59 - - [04/Aug/2026:04:29:43 +0200] "POST /wp-login.php HTTP/1.1" 200 5091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.154.138.59 - - [04/Aug/2026:04:29:51 +0200] "POST /wp-login.php HTTP/1.1" 200 5090 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36" 45.154.138.59 - - [04/Aug/2026:04:30:01 +0200] "POST /wp-login.php HTTP/1.1" 200 5090 "-" "Mozilla/5.0 (Linux; Android 11; Nokia G50) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.61 Mobile Safari/537.36" 45.154.138.59 - - [04/Aug/2026:04:30:09 +0200] "POST /wp-login.php HTTP/1.1" 200 5089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-08-01 22:49:06 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.154.138.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.154.138.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 18:49:00.581470 2026] [security2:error] [pid 2261362:tid 2261362] [client 45.154.138.59:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webfrog.ws"] [uri "/.env"] [unique_id "am533I2h4QsuBGts7htClgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 pipeline.es	2026-07-17 19:55:11 (4 weeks ago)	Web scanning / probing for vulnerable paths \| URL: /nation.php \| Evidence: mundoteatro.es 45.154.138 ... show more Web scanning / probing for vulnerable paths \| URL: /nation.php \| Evidence: mundoteatro.es 45.154.138.59 - - [17/Jul/2026:21:51:52 +0200] \"GET /nation.php HTTP/1.1\" 404 208 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36\" GEOIP_COUNTRY_CODE=FR \| ASN: F.n.s. Holdings Limited \| Country: FR show less	Port Scan Web App Attack
🇫🇷 dynamix	2026-07-17 16:59:39 (4 weeks ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-07-16 00:05:44 (1 month ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/ioxi/ /blog/wp-content/ /wp-content/t ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/ioxi/ /blog/wp-content/ /wp-content/themes/astra/inc/ /wp-content/plugins/ccx/ / ... show less	Web App Attack
Anonymous	2026-07-13 18:57:05 (1 month ago)	ZUOBDE WEBFORM SPAM 45.154.138.59 (45.154.138.59)	Web Spam
🇫🇷 masterguru	2026-06-19 21:01:39 (1 month ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-195)	Hacking Bad Web Bot
🇫🇷 geot	2026-06-19 12:00:24 (1 month ago)	GET /config.json HTTP/1.1 GET /app/.env HTTP/1.1	Hacking Web App Attack
Anonymous	2026-06-19 10:06:50 (1 month ago)	45.154.138.59 - - [19/Jun/2026:13:06:41 +0300] "GET /load.environment.php HTTP/1.1" 404 266 45.154.1 ... show more 45.154.138.59 - - [19/Jun/2026:13:06:41 +0300] "GET /load.environment.php HTTP/1.1" 404 266 45.154.138.59 - - [19/Jun/2026:13:06:46 +0300] "GET /.env_develop HTTP/1.1" 403 251 45.154.138.59 - - [19/Jun/2026:13:06:49 +0300] "GET /.env.local HTTP/1.1" 403 249 show less	Bad Web Bot
🇩🇪 MusicLibrary	2026-06-19 03:08:22 (1 month ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇮🇹 [email protected]	2026-06-09 18:59:45 (2 months ago)	45.154.138.59 - - [09/Jun/2026:20:59:36 +0200] "GET /wp-content/uploads/settings.php HTTP/1.1" 404 7 ... show more 45.154.138.59 - - [09/Jun/2026:20:59:36 +0200] "GET /wp-content/uploads/settings.php HTTP/1.1" 404 790 "http://intoino.it/wp-content/uploads/settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" show less	Brute-Force Web App Attack

Showing 1 to 15 of 221 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 61.97.17.208

🇸🇬 172.253.211.18

🇺🇸 172.234.192.95

🇺🇸 157.230.49.33

🇸🇮 130.12.182.227

🇲🇾 113.211.100.129

🇺🇸 100.29.192.79

🇺🇸 66.132.186.174

🇮🇳 2401:4900:8845:1271:310b:39b5:2ecf:4cd5

🇨🇳 223.88.154.222

🇦🇪 217.165.22.192

🇨🇳 120.240.178.139

🇭🇰 119.246.15.94

🇯🇵 111.235.76.92

🇫🇷 104.23.225.164

🇮🇱 82.102.149.88

🇬🇧 64.49.11.145

🇨🇦 34.19.152.15

🇱🇹 213.176.26.175

🇱🇹 213.176.26.41