JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.86.202.130

45.86.202.130 was found in our database!

This IP was reported 290 times. Confidence of Abuse is 38%: ?

38%

ISP	VPN Consumer Frankfurt, Germany
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.86.202.130

Whois 45.86.202.130

IP Abuse Reports for 45.86.202.130:

This IP address has been reported a total of 290 times from 97 distinct sources. 45.86.202.130 was first reported on February 21st 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-11 08:04:18 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 xmission.com	2026-08-10 07:47:01 (1 week ago)	45.86.202.130 - - [10/Aug/2026:01:47:00 -0600] "POST /xmlrpc.php HTTP/1.1" 301 162 "https://www.dooc ... show more 45.86.202.130 - - [10/Aug/2026:01:47:00 -0600] "POST /xmlrpc.php HTTP/1.1" 301 162 "https://www.dooce.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 dynamix	2026-08-10 02:58:46 (1 week ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇮🇹 VHosting	2026-08-09 22:55:04 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 todix	2026-08-09 22:53:50 (1 week ago)	Wordpress brute force or spam attempt from 45.86.202.130	Brute-Force
🇬🇧 consul.to	2026-07-15 10:56:34 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇯🇵 SentinalX by uzumaru	2026-07-07 07:14:01 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.myip.com:443 show less	Open Proxy Port Scan
🇫🇷 Octopuce	2026-06-14 18:55:15 (2 months ago)	Aggressive web search of vulnerable pages: /wp-includes/pomo/ /wp-content/themes/twentytwentythree/p ... show more Aggressive web search of vulnerable pages: /wp-includes/pomo/ /wp-content/themes/twentytwentythree/patterns/ /wp-admin/css/colors/sunrise/ /wp- ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 07:14:30 (2 months ago)	(mod_security) mod_security (id:240000) triggered by 45.86.202.130 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 45.86.202.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:14:24.632428 2026] [security2:error] [pid 18407:tid 18407] [client 45.86.202.130:31801] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|jcrluthier.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "jcrluthier.com"] [uri "/images/stories/themes.php"] [unique_id "ai5U0JAjTCx37ZEiHV53xgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-06-14 01:36:27 (2 months ago)	(mod_security) mod_security (id:900191) triggered by 45.86.202.130 (DE/Germany/-): 5 in the last 900 ... show more (mod_security) mod_security (id:900191) triggered by 45.86.202.130 (DE/Germany/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇳🇱 Site.eu	2026-05-18 21:28:10 (2 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇹🇭 thaizone.com	2026-05-13 05:15:33 (3 months ago)	Hacking attempts against websites (D1) #1	Web App Attack Hacking
🇫🇷 masterguru	2026-05-12 15:47:50 (3 months ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-196)	Hacking
🇺🇸 TPI-Abuse	2026-05-06 09:14:40 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 45.86.202.130 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 45.86.202.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 05:14:35.948307 2026] [security2:error] [pid 5441:tid 5441] [client 45.86.202.130:62115] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|linzylyne.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "linzylyne.com"] [uri "/images/stories/themes.php"] [unique_id "afsGe_Bd4jf-sZ2bceTYWwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-05-06 04:20:41 (3 months ago)	Aggressive web search of vulnerable pages: /wp-admin/maint/bootstrap.php /themes/zMousse/otuz1.php / ... show more Aggressive web search of vulnerable pages: /wp-admin/maint/bootstrap.php /themes/zMousse/otuz1.php /wp-content/edit-wolf.php /wp-content/plugin ... show less	Web App Attack

Showing 1 to 15 of 290 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.191

🇸🇬 165.232.164.223

🇺🇸 152.32.206.49

🇫🇮 147.185.133.221

🇫🇷 104.23.229.56

🇸🇪 83.233.97.33

🇮🇳 223.182.99.153

🇦🇷 209.61.7.229

🇦🇷 190.9.70.86

🇫🇷 176.169.15.103

🇺🇸 162.216.150.207

🇨🇳 112.94.252.182

🇺🇸 107.175.183.32

🇫🇷 91.231.89.154

🇺🇸 76.192.119.243

🇱🇹 62.60.130.253

🇧🇾 46.53.193.236

🇺🇸 45.92.229.62

🇮🇩 36.71.176.137

🇧🇷 187.6.140.111