JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.5.72

45.133.5.72 was found in our database!

This IP was reported 191 times. Confidence of Abuse is 27%: ?

27%

ISP	VPN Consumer Sydney, Australia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.5.72

Whois 45.133.5.72

IP Abuse Reports for 45.133.5.72:

This IP address has been reported a total of 191 times from 76 distinct sources. 45.133.5.72 was first reported on April 17th 2022, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-25 14:30:50 (20 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Octopuce	2026-06-15 10:09:09 (1 week ago)	Aggressive web search of vulnerable pages: /blog/wp-content/ /wp-content/themes/astra/inc/ /wp-conte ... show more Aggressive web search of vulnerable pages: /blog/wp-content/ /wp-content/themes/astra/inc/ /wp-content/plugins/ccx/ /wp-includes/css/dist/edit- ... show less	Web App Attack
🇩🇪 paissangroup	2026-05-16 11:42:12 (1 month ago)	Multiple WAF Violations	Web App Attack
🇦🇺 MAGIC	2026-05-14 01:03:39 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 Site.eu	2026-05-08 21:25:35 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-05-07 23:56:33 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 45.133.5.72 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.5.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 19:56:28.661463 2026] [security2:error] [pid 7271:tid 7299] [client 45.133.5.72:20675] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|exedesalesteam.exede-sales.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "exedesalesteam.exede-sales.com"] [uri "/images/stories/themes.php"] [unique_id "af0mrAAhaGrc1TTzuUA7rgAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-05-06 20:47:51 (1 month ago)	Aggressive web search of vulnerable pages: /wp-class.php /wp-includes/images/smilies/index.php /xx.p ... show more Aggressive web search of vulnerable pages: /wp-class.php /wp-includes/images/smilies/index.php /xx.php /autoload_classmap.php /wp-includes/clas ... show less	Web App Attack
🇨🇭 YF	2026-05-05 06:05:32 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇫🇷 dynamix	2026-04-23 08:09:29 (2 months ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2026-04-21 23:48:44 (2 months ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-04-21 22:16:39 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-04-20 20:23:52 (2 months ago)	(mod_security) mod_security (id:240000) triggered by 45.133.5.72 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.5.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 16:23:47.332434 2026] [security2:error] [pid 8092:tid 8112] [client 45.133.5.72:38739] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|financialcertified.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "financialcertified.com"] [uri "/images/stories/themes.php"] [unique_id "aeaLU5DI3ZthVQQlCv72XQAAAFA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-04-18 17:23:02 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 consul.to	2026-04-18 12:49:13 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-04-18 04:32:39 (2 months ago)	[redacted] 45.133.5.72 - - [18/Apr/2026:06:32:29 +0200] "GET /wp-admin/css/colors/blue/about.php HTT ... show more [redacted] 45.133.5.72 - - [18/Apr/2026:06:32:29 +0200] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" [redacted] 45.133.5.72 - - [18/Apr/2026:06:32:29 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" [redacted] 45.133.5.72 - - [18/Apr/2026:06:32:30 +0200] "GET /wp-admin/defaults.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" [redacted] 45.133.5.72 - - [18/Apr/2026:06:32:31 +0200] "GET /wp-admin/maint/about.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" [redacted] 45.133.5.72 - - [18/Apr/2026:06:32:31 +0200] "GET /wp-admin/js/about.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Wind ... show less	Hacking Web App Attack

Showing 1 to 15 of 191 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.217

🇬🇧 195.96.139.85

🇺🇸 172.202.118.20

🇰🇭 116.212.133.42

🇮🇳 49.36.41.128

🇲🇲 45.41.104.242

🇭🇰 43.129.193.168

🇺🇸 162.216.149.92

🇨🇳 121.204.171.142

🇧🇩 103.138.125.48

🇺🇸 66.132.172.154

🇺🇸 64.62.156.228

🇸🇬 45.78.198.199

🇸🇬 43.173.174.8

🇬🇧 35.203.210.125

🇮🇹 4.232.94.242

🇨🇴 201.46.124.0

🇹🇳 197.31.52.168

🇷🇺 178.178.222.53

🇺🇸 92.50.39.228