JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.6.11

45.133.6.11 was found in our database!

This IP was reported 93 times. Confidence of Abuse is 65%: ?

65%

ISP	VPN-Consumer-AU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇦🇺 Australia
City	Perth, Western Australia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.6.11

Whois 45.133.6.11

IP Abuse Reports for 45.133.6.11:

This IP address has been reported a total of 93 times from 45 distinct sources. 45.133.6.11 was first reported on November 26th 2020, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-19 18:19:13 (18 hours ago)	(mod_security) mod_security (id:240000) triggered by 45.133.6.11 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.6.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 14:19:09.999990 2026] [security2:error] [pid 12519:tid 12519] [client 45.133.6.11:26069] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.virginiajohnstone.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.virginiajohnstone.com"] [uri "/images/stories/themes.php"] [unique_id "aq7SHTSDNiJwHqeVAD4NSwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-19 00:58:08 (1 day ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-09-18 18:48:02 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 IndigoRidge	2026-09-18 17:52:24 (1 day ago)	45.133.6.11 - - [18/Sep/2026:13:51:33 -0400] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (W ... show more 45.133.6.11 - - [18/Sep/2026:13:51:33 -0400] "GET /.wp/wso.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.6.11 - - [18/Sep/2026:13:51:52 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.6.11 - - [18/Sep/2026:13:52:23 -0400] "GET /wp-includes/assets/info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" ... show less	Web App Attack
🇧🇪 taivas.nl	2026-09-18 04:33:04 (2 days ago)	Many_bad_calls	Web App Attack
🇧🇪 taivas.nl	2026-09-17 18:02:11 (2 days ago)	Bad_requests	Bad Web Bot
🇸🇬 pusathosting.com	2026-09-16 02:00:08 (4 days ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇩🇪 raph	2026-09-15 21:37:49 (4 days ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
Anonymous	2026-09-15 20:39:39 (4 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-09-15 16:15:45 (4 days ago)	IP matched detection query many 3xx errors.	Brute-Force
🇺🇸 TPI-Abuse	2026-09-15 14:22:14 (4 days ago)	(mod_security) mod_security (id:240000) triggered by 45.133.6.11 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.6.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 10:22:08.924456 2026] [security2:error] [pid 12034:tid 12034] [client 45.133.6.11:58327] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|angelsofrhodeisland.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "angelsofrhodeisland.com"] [uri "/images/stories/themes.php"] [unique_id "aqlUkLgUz655KzW1eBVgowAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-14 22:50:22 (5 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2026-09-12 07:09:03 (1 week ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-09-12 03:09:34 (1 week ago)	[ssd5.kdns.gr] httpd-shell-path-probe: sites=www.totzaki.gr; logs=/var/log/httpd/domains/totzaki.gr. ... show more [ssd5.kdns.gr] httpd-shell-path-probe: sites=www.totzaki.gr; logs=/var/log/httpd/domains/totzaki.gr.log; samples=/wp-includes/ID3/shell.php \| /wp-includes/pomo/alfa-rex.php show less	Hacking Web App Attack
🇩🇪 4server	2026-08-24 16:36:13 (3 weeks ago)	[MonAug2418:36:09.8020482026][security2:error][pid1288193:tid1288317][client45.133.6.11:0]ModSecurit ... show more [MonAug2418:36:09.8020482026][security2:error][pid1288193:tid1288317][client45.133.6.11:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"modules/mod_simplefileuploadv1\\\\\\\\.3\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"640\"][id\"390746\"][rev\"1\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:KnownVulnerableJoomlaSimpleFileUploadv1.3Accessblocked\"][hostname\"simireinigung.ch\"][uri\"/modules/mod_simplefileuploadv1.3/elements/filemanager.php\"][unique_id\"aoxy-ZksjB-wE1Z_MBXCUwAAAkw\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.16.96.250

🇩🇪 185.220.101.12

🇭🇰 118.26.37.91

🇨🇳 117.50.51.198

🇮🇩 103.121.20.18

🇧🇩 103.113.153.50

🇩🇪 69.5.169.77

🇺🇸 20.65.202.209

🇺🇸 17.166.24.40

🇺🇸 2604:a880:400:d1:0:5:2b9:8001

🇭🇰 218.189.84.73

🇧🇬 109.160.32.157

🇷🇺 77.232.165.213

🇺🇸 65.49.20.69

🇻🇪 45.195.12.212

🇭🇰 220.246.42.227

🇺🇸 216.24.219.89

🇮🇳 182.70.123.42

🇺🇸 172.71.222.162

🇨🇳 116.235.231.237