JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.154.138.98

45.154.138.98 was found in our database!

This IP was reported 189 times. Confidence of Abuse is 38%: ?

38%

ISP	VPN Consumer Marseille, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.154.138.98

Whois 45.154.138.98

IP Abuse Reports for 45.154.138.98:

This IP address has been reported a total of 189 times from 89 distinct sources. 45.154.138.98 was first reported on January 18th 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-08-11 00:29:21 (6 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-10 02:29:21 (6 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-08-04 06:20:54 (1 week ago)	Try to access /xmlrpc.php	Web App Attack
🇬🇧 Celtic	2026-08-04 00:59:42 (1 week ago)	Blocked by Fail2Ban with Jail (plesk-wordpress)	Brute-Force SSH
🇺🇸 webgobe	2026-07-17 20:43:57 (4 weeks ago)	tow-Joomla User : try to access forms...	Hacking
🇪🇸 pipeline.es	2026-07-17 19:55:12 (4 weeks ago)	Web scanning / probing for vulnerable paths \| URL: /wp-content/plugins/WordPressCore/gecko.php \| Evi ... show more Web scanning / probing for vulnerable paths \| URL: /wp-content/plugins/WordPressCore/gecko.php \| Evidence: mundoteatro.es 45.154.138.98 - - [17/Jul/2026:21:52:44 +0200] \"GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1\" 404 240 \"-\" \"Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0\" GEOIP_COUNTRY_CODE=FR \| ASN: F.n.s. Holdings Limited \| Country: FR show less	Port Scan Web App Attack
🇫🇷 dynamix	2026-07-15 23:47:22 (1 month ago)	Multiple WAF Violations	Web App Attack
🇿🇦 conure	2026-07-15 20:18:51 (1 month ago)	csagent: score 15.2: php 404 x3, 404 noise floor x3, webshell name x1; 1 domain(s) in 0s	Web App Attack
Anonymous	2026-07-15 20:17:37 (1 month ago)	[redacted] 45.154.138.98 - - [15/Jul/2026:22:17:28 +0200] "GET /wp-admin/css/chosen.php HTTP/1.1" 40 ... show more [redacted] 45.154.138.98 - - [15/Jul/2026:22:17:28 +0200] "GET /wp-admin/css/chosen.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" [redacted] 45.154.138.98 - - [15/Jul/2026:22:17:29 +0200] "GET /css/adminfusm.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" [redacted] 45.154.138.98 - - [15/Jul/2026:22:17:30 +0200] "GET /wp-admin/includes/admin.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" [redacted] 45.154.138.98 - - [15/Jul/2026:22:17:30 +0200] "GET /wp-admin/media-new.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" [redacted] 45.154.138.98 - - [15/Jul/2026:22:17:32 +0200] "GET /admin/install.php H ... show less	Hacking Web App Attack
🇩🇪 YF	2026-06-19 22:20:24 (1 month ago)	Environment file probe	Web App Attack
🇫🇷 geot	2026-06-19 12:00:12 (1 month ago)	GET /package.json HTTP/1.1 GET /.env.local HTTP/1.0 GET /.env.save HTTP/1.0 GET /backup/.env HTTP/1. ... show more GET /package.json HTTP/1.1 GET /.env.local HTTP/1.0 GET /.env.save HTTP/1.0 GET /backup/.env HTTP/1.0 GET /.env.production HTTP/1.1 GET /config.ini HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-06-19 10:07:14 (1 month ago)	45.154.138.98 - - [19/Jun/2026:13:06:29 +0300] "GET /.env.dist HTTP/1.1" 403 248 45.154.138.98 - - [ ... show more 45.154.138.98 - - [19/Jun/2026:13:06:29 +0300] "GET /.env.dist HTTP/1.1" 403 248 45.154.138.98 - - [19/Jun/2026:13:06:47 +0300] "GET /.env~ HTTP/1.1" 403 244 45.154.138.98 - - [19/Jun/2026:13:07:13 +0300] "GET /web.config HTTP/1.1" 404 256 show less	Bad Web Bot
Anonymous	2026-06-19 03:32:56 (1 month ago)	45.154.138.98 - - [19/Jun/2026:03:32:55 +0000] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/ ... show more 45.154.138.98 - - [19/Jun/2026:03:32:55 +0000] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15" "-" "91.98.135.170" ... show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Enno	2026-06-18 22:31:20 (1 month ago)	P04::Fail2Ban: automated bot scanning / credential probing detected.	Web App Attack Bad Web Bot
🇮🇹 [email protected]	2026-06-09 18:58:21 (2 months ago)	45.154.138.98 - - [09/Jun/2026:20:56:41 +0200] "GET /wp-includes/css/dist/ HTTP/1.1" 301 761 "-" "Mo ... show more 45.154.138.98 - - [09/Jun/2026:20:56:41 +0200] "GET /wp-includes/css/dist/ HTTP/1.1" 301 761 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"45.154.138.98 - - [09/Jun/2026:20:56:41 +0200] "GET /wp-content/themes/twentynineteen/sass/site/ HTTP/1.1" 301 805 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"45.154.138.98 - - [09/Jun/2026:20:56:42 +0200] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 189 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.128.41.218

🇹🇼 111.70.3.106

🇺🇸 98.226.197.108

🇨🇱 45.225.205.236

🇨🇳 220.168.242.48

🇧🇷 191.177.194.193

🇨🇳 171.80.154.220

🇫🇮 170.168.241.119

🇺🇸 165.232.61.133

🇺🇸 162.216.149.187

🇺🇸 143.198.65.226

🇧🇬 91.191.209.198

🇺🇸 64.62.156.206

🇱🇹 62.60.130.253

🇺🇸 45.205.24.168

🇺🇸 44.209.167.138

🇷🇴 2.57.121.112

🇺🇸 2604:a880:400:d1:0:4:d402:9001

🇨🇳 223.84.195.56

🇺🇸 216.73.216.62