JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.119.133.6

45.119.133.6 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	VIETTEL (Cambodia) PTE.,LTD
Usage Type	Fixed Line ISP
ASN	AS38623
Domain Name	metfone.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.119.133.6

Whois 45.119.133.6

IP Abuse Reports for 45.119.133.6:

This IP address has been reported a total of 16 times from 10 distinct sources. 45.119.133.6 was first reported on August 13th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-08-27 01:59:32 (1 year ago)	apache-wordpress-login	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-08-27 01:43:14 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 45.119.133.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 45.119.133.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 26 21:43:07.946977 2024] [security2:error] [pid 21141:tid 21141] [client 45.119.133.6:43972] [client 45.119.133.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.119.133.6 (+1 hits since last alert)\|qed-consulting.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "qed-consulting.co"] [uri "/xmlrpc.php"] [unique_id "Zs0vK5p_4-kAqanpuyQ1ZAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-08-24 12:04:14 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2024-08-24 11:55:11 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇬🇧 openstrike.co.uk	2024-08-24 09:33:06 (1 year ago)	6 packets to port 587	Brute-Force
Anonymous	2024-08-24 01:52:45 (1 year ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 final	2024-08-23 23:19:40 (1 year ago)	Aug 24 01:18:57 xxxxx postfix/smtpd[1331579]: lost connection after EHLO from unknown[45.119.133.6] ... show more Aug 24 01:18:57 xxxxx postfix/smtpd[1331579]: lost connection after EHLO from unknown[45.119.133.6] Aug 24 01:19:11 xxxxx postfix/smtpd[1331579]: lost connection after EHLO from unknown[45.119.133.6] Aug 24 01:19:15 xxxxx postfix/smtpd[1331579]: lost connection after EHLO from unknown[45.119.133.6] Aug 24 01:19:40 xxxxx postfix/smtpd[1331579]: NOQUEUE: reject: RCPT from unknown[45.119.133.6]: 550 5.7.1 <[email protected]>: Recipient address rejected: Your MTA is listed in too many DNSBLs; check http://www.robtex.com/rbl/45.119.133.6.html; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vahdetelektronik.com> show less	Phishing Email Spam Spoofing
🇲🇾 syokadmin	2024-08-23 11:14:38 (1 year ago)	45.119.133.6 (KH/Cambodia/-), 2 distributed smtpauth attacks on account [[email protected]. ... show more 45.119.133.6 (KH/Cambodia/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
Anonymous	2024-08-23 01:46:14 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇬🇧 Hobby Bob	2024-08-22 23:42:58 (1 year ago)	Aug 23 00:42:58 mail postfix/smtpd[3987194]: NOQUEUE: reject: RCPT from unknown[45.119.133.6]: 554 5 ... show more Aug 23 00:42:58 mail postfix/smtpd[3987194]: NOQUEUE: reject: RCPT from unknown[45.119.133.6]: 554 5.7.1 Service unavailable; Client host [45.119.133.6] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/45.119.133.6 / Listed by PBL, see https://check.spamhaus.org/query/ip/45.119.133.6 / Listed by XBL, see https://check.spamhaus.org/query/ip/45.119.133.6; from= to= proto=ESMTP helo= show less	Email Spam
🇺🇸 TPI-Abuse	2024-08-22 14:41:34 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 45.119.133.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 45.119.133.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 10:41:28.068049 2024] [security2:error] [pid 24340:tid 24340] [client 45.119.133.6:57586] [client 45.119.133.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.119.133.6 (+1 hits since last alert)\|mccompu.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mccompu.com"] [uri "/xmlrpc.php"] [unique_id "ZsdOGJ0nWd1Ex4uSCrRMBwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 maximonline.co.za	2024-08-22 10:40:25 (1 year ago)	Brute Force SMTP AUTH Attack	Brute-Force
Anonymous	2024-08-22 09:38:32 (1 year ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-08-22 01:23:51 (1 year ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-08-21 20:09:56 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 45.119.133.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 45.119.133.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 21 16:09:49.242284 2024] [security2:error] [pid 2831080:tid 2831212] [client 45.119.133.6:43898] [client 45.119.133.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.119.133.6 (+1 hits since last alert)\|www.honorac.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.honorac.com"] [uri "/xmlrpc.php"] [unique_id "ZsZJjTmjJBybzcwaCr0cWQAAARQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.76.248.54

🇹🇼 220.134.189.56

🇸🇬 210.10.77.101

🇺🇸 192.254.207.99

🇧🇷 187.93.51.46

🇲🇰 185.226.0.83

🇨🇳 183.236.7.193

🇺🇸 162.216.149.3

🇮🇳 124.123.41.26

🇮🇳 103.190.7.203

🇳🇱 92.63.197.5

🇺🇦 31.42.184.158

🇩🇪 2.243.166.56

🇺🇸 2001:5e8:e0:4:9999::5

🇲🇽 189.175.19.63

🇧🇷 187.0.238.206

🇧🇷 131.161.249.165

🇻🇳 123.30.233.12

🇨🇳 121.229.156.124

🇭🇰 103.30.40.129