JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.5.148

45.133.5.148 was found in our database!

This IP was reported 225 times. Confidence of Abuse is 17%: ?

17%

ISP	VPN Consumer Sydney, Australia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.5.148

Whois 45.133.5.148

IP Abuse Reports for 45.133.5.148:

This IP address has been reported a total of 225 times from 83 distinct sources. 45.133.5.148 was first reported on September 5th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-15 17:31:16 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 45.133.5.148 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.133.5.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 13:31:12.103722 2026] [security2:error] [pid 21115:tid 21115] [client 45.133.5.148:59227] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|stewarttaylor.ingberinteriors.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "stewarttaylor.ingberinteriors.com"] [uri "/images/stories/themes.php"] [unique_id "aoCiYBQwgnLVC4N3eX9XbAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-15 15:26:19 (1 week ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-07-10 04:46:04 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 dynamix	2026-06-15 10:35:58 (2 months ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-06-07 16:02:33 (2 months ago)	Aggressive web search of vulnerable pages: /wp-includes/rest-api/about.php /css/css.php /init.php /w ... show more Aggressive web search of vulnerable pages: /wp-includes/rest-api/about.php /css/css.php /init.php /wp-admin/user/wp-login.php /autoload_classma ... show less	Web App Attack
🇺🇸 mw	2026-06-05 00:01:16 (2 months ago)	GET /wp-admin/maint/bootstrap.php HTTP/1.1	Web App Attack
🇩🇪 scolastico	2026-05-30 03:11:10 (2 months ago)	[automated] IP failed to authenticate or send unauthenticated INVITE requests	Brute-Force Fraud VoIP
🇩🇪 scolastico	2026-05-29 03:07:20 (2 months ago)	[automated] IP failed to authenticate or send unauthenticated INVITE requests	Brute-Force Fraud VoIP
🇩🇪 scolastico	2026-05-28 03:03:02 (2 months ago)	[automated] IP failed to authenticate or send unauthenticated INVITE requests	Brute-Force Fraud VoIP
🇧🇪 cmbplf	2026-05-05 20:59:38 (3 months ago)	124 requests with url.path *config.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-05 03:54:01 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 45.133.5.148 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.133.5.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 23:53:54.394268 2026] [security2:error] [pid 30187:tid 30187] [client 45.133.5.148:39615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.integrabroadcast.com"] [uri "/wp-config.php"] [unique_id "aflp0l4UzPGY8_N1LpOhigAAABA"], referer: http://integrabroadcast.com/wp-config.php show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-05-05 03:41:57 (3 months ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2026-04-27 06:53:51 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 45.133.5.148 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.133.5.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 02:53:44.155251 2026] [security2:error] [pid 25546:tid 25546] [client 45.133.5.148:32333] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|cathayexpress.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "cathayexpress.com"] [uri "/images/stories/themes.php"] [unique_id "ae8H-APJ1hOBfeL5ukl7egAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-23 07:35:32 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 45.133.5.148 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.133.5.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 03:35:07.799165 2026] [security2:error] [pid 29990:tid 29990] [client 45.133.5.148:42885] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.fixitsmart.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.fixitsmart.com"] [uri "/images/stories/themes.php"] [unique_id "aenLq7l8_An-CMLE4qgNyAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-04-23 04:13:00 (4 months ago)	IPBlock protected site ID [4055-d][s=02]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 225 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.230

🇺🇸 165.154.182.124

🇺🇸 157.245.210.173

🇺🇸 147.185.132.152

🇹🇼 123.110.201.104

🇺🇸 109.105.210.69

🇮🇪 109.77.37.27

🇮🇩 103.103.193.18

🇺🇸 100.29.192.6

🇬🇧 81.19.219.231

🇷🇺 80.244.43.93

🇩🇪 64.89.163.132

🇨🇳 61.134.25.106

🇺🇸 45.33.110.79

🇺🇸 40.124.175.58

🇨🇴 38.199.241.5

🇺🇸 23.129.64.211

🇭🇰 8.217.99.120

🇺🇸 2400:cb00:119:1000:2e6:6cc9:6b6f:fb3a

🇱🇹 213.176.26.77