JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.132.224.107

45.132.224.107 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 77%: ?

77%

ISP	VPN-Consumer-AU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	syndesi-networks.nl
Country	🇦🇺 Australia
City	Brisbane, Queensland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.132.224.107

Whois 45.132.224.107

IP Abuse Reports for 45.132.224.107:

This IP address has been reported a total of 105 times from 51 distinct sources. 45.132.224.107 was first reported on March 3rd 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-29 20:59:01 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇧🇪 cmbplf	2026-06-28 12:35:47 (2 days ago)	138 requests with url.path *config.php	Brute-Force Bad Web Bot
🇺🇸 Mundo Bueno	2026-06-28 00:09:33 (3 days ago)	[ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: AU \| UA: Go-http-client/2.0	Hacking Web App Attack
🇩🇪 ghostwarriors	2026-06-27 23:50:32 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 13:03:36 (3 days ago)	(mod_security) mod_security (id:240000) triggered by 45.132.224.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 45.132.224.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 09:03:31.963983 2026] [security2:error] [pid 11143:tid 11143] [client 45.132.224.107:36359] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|thewhoscountingband.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "thewhoscountingband.com"] [uri "/images/stories/themes.php"] [unique_id "aj_KI3OFQJe0V0gWjdMv6gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-27 12:29:31 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Philister11	2026-06-27 00:43:28 (4 days ago)	CrowdSec: crowdsecurity/http-probing (AU/AS137409)	Web App Attack Hacking
🇫🇷 dynamix	2026-06-26 00:15:07 (5 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 23:38:39 (5 days ago)	(mod_security) mod_security (id:240000) triggered by 45.132.224.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 45.132.224.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 19:38:35.836813 2026] [security2:error] [pid 29886:tid 29895] [client 45.132.224.107:38115] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|bocsite.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "bocsite.com"] [uri "/images/stories/themes.php"] [unique_id "aj27-3PdMUY7xIq3OsO5bAAAAUI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 london2038.com	2026-06-25 23:05:13 (5 days ago)	Probing for exploits 45.132.224.107 - - [26/Jun/2026:01:05:09 +0200] "GET /wp-signin.php HTTP/1.1" 3 ... show more Probing for exploits 45.132.224.107 - - [26/Jun/2026:01:05:09 +0200] "GET /wp-signin.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" 45.132.224.107 - - [26/Jun/2026:01:05:10 +0200] "GET /wp-admin/maint/network/ HTTP/1.1" 301 169 "-" "Go-http-client/1.1" show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-06-25 12:02:17 (5 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-24 20:53:23 (6 days ago)	(mod_security) mod_security (id:240000) triggered by 45.132.224.107 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 45.132.224.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 16:53:17.020859 2026] [security2:error] [pid 1153:tid 1247] [client 45.132.224.107:47821] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|mykfccares.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "mykfccares.com"] [uri "/images/stories/themes.php"] [unique_id "ajxDvW0IlBVWiZrRCQbDKQAAAIw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-24 18:04:51 (6 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-06-24 17:00:11 (6 days ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/hello-plus/classes/ehp-sarang.php /wp ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/hello-plus/classes/ehp-sarang.php /wp-admin/network/network.php /admin/upload/cs ... show less	Web App Attack
🇬🇧 consul.to	2026-06-24 04:10:58 (1 week ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.196.210.87

🇮🇩 202.152.201.166

🇳🇱 195.178.110.232

🇺🇸 172.253.218.212

🇲🇦 160.178.63.113

🇻🇳 160.22.170.38

🇲🇽 148.216.255.251

🇮🇹 147.45.51.138

🇦🇷 131.255.240.10

🇻🇳 123.25.115.112

🇰🇷 115.71.233.62

🇰🇷 112.219.151.50

🇺🇸 107.150.98.168

🇻🇳 103.179.174.112

🇺🇸 95.164.194.102

🇺🇸 95.164.159.95

🇺🇸 95.164.159.73

🇬🇪 91.239.206.123

🇺🇸 86.111.187.169

🇨🇳 58.210.197.34