JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.132.225.89

45.132.225.89 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 41%: ?

41%

ISP	VPN-Consumer-AU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	syndesi-networks.nl
Country	🇦🇺 Australia
City	Melbourne, Victoria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.132.225.89

Whois 45.132.225.89

IP Abuse Reports for 45.132.225.89:

This IP address has been reported a total of 50 times from 27 distinct sources. 45.132.225.89 was first reported on August 6th 2022, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-26 01:09:45 (1 hour ago)	[SunJul2603:09:41.3762682026][security2:error][pid844155:tid844169][client45.132.225.89:0]ModSecurit ... show more [SunJul2603:09:41.3762682026][security2:error][pid844155:tid844169][client45.132.225.89:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"artisteer-italia.org.136-243-54-122.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"amVeVfzyPwdge1Ak37cHjgAAAMs\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-18 19:51:25 (1 week ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2026-07-15 17:47:13 (1 week ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-07-15 05:56:53 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-07-14 03:48:21 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Ba-Yu	2026-07-13 05:11:36 (1 week ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇫🇷 tecnicorioja	2026-07-03 22:00:13 (3 weeks ago)	POST /xmlrpc.php [03/Jul/2026:13:42:28	Brute-Force Web App Attack
🇩🇪 maxpower	2026-06-30 17:14:26 (3 weeks ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 45.132.225.89 (AU/Australia/-): 1 in the last ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 45.132.225.89 (AU/Australia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.132.225.89 - - [30/Jun/2026:19:14:21 +0200] "GET /css/media-widget-vide02.php HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "-" host=ramsesconsulting.com show less	Port Scan
🇫🇷 dynamix	2026-06-30 11:39:25 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 15:55:41 (3 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.132.225.89 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 45.132.225.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 11:55:34.114165 2026] [security2:error] [pid 21347:tid 21347] [client 45.132.225.89:65137] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|siouxfallslimos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "siouxfallslimos.com"] [uri "/images/stories/themes.php"] [unique_id "akFD9jEzpf_Tz8nmD1rPGgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 08:09:43 (3 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.132.225.89 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 45.132.225.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 04:09:37.459641 2026] [security2:error] [pid 2368:tid 2368] [client 45.132.225.89:61039] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|hawksnestgolfcourse.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hawksnestgolfcourse.com"] [uri "/images/stories/themes.php"] [unique_id "akDWwZN_BRO2PvVvsDexxAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 18:26:03 (4 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.132.225.89 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 45.132.225.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 14:25:55.722902 2026] [security2:error] [pid 14646:tid 14646] [client 45.132.225.89:62829] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|villasenor.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "villasenor.org"] [uri "/images/stories/themes.php"] [unique_id "akAVswnesiE83VunGmgS5wAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-06-27 15:14:48 (4 weeks ago)	Aggressive web search of vulnerable pages: /update/ /wp-content/ /wp-admin/maint/ /themes/zMousse/ / ... show more Aggressive web search of vulnerable pages: /update/ /wp-content/ /wp-admin/maint/ /themes/zMousse/ /wp-content/plugins/ubh/ /wp-admin/images/ / ... show less	Web App Attack
🇬🇧 consul.to	2026-06-20 03:53:10 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇦🇺 MAGIC	2026-06-15 02:07:40 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.249

🇩🇪 178.128.202.146

🇺🇸 178.128.145.56

🇺🇸 135.237.126.2

🇹🇭 118.193.57.185

🇺🇸 109.105.210.90

🇲🇶 92.144.231.9

🇺🇸 45.61.187.220

🇧🇪 35.241.143.204

🇺🇸 12.156.67.18

🇺🇸 2607:ff10:c8:594::6

🇺🇸 162.243.22.79

🇧🇭 87.237.198.139

🇳🇱 77.83.39.14

🇳🇱 45.156.128.112

🇧🇪 34.22.245.18

🇺🇸 20.65.154.175

🇺🇸 13.219.1.233

🇵🇭 2001:4456:c3e:b300:e1:f315:cb4a:f07e

🇺🇸 2001:470:2cc:1::29f