JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.6.39

45.133.6.39 was found in our database!

This IP was reported 92 times. Confidence of Abuse is 55%: ?

55%

ISP	VPN-Consumer-AU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇦🇺 Australia
City	Perth, Western Australia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.6.39

Whois 45.133.6.39

IP Abuse Reports for 45.133.6.39:

This IP address has been reported a total of 92 times from 36 distinct sources. 45.133.6.39 was first reported on July 3rd 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-26 23:25:23 (1 hour ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 01:10:44 (23 hours ago)	(mod_security) mod_security (id:240000) triggered by 45.133.6.39 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.6.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 21:10:36.953975 2026] [security2:error] [pid 4018980:tid 4018993] [client 45.133.6.39:59597] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|thedowntonstory.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "thedowntonstory.com"] [uri "/images/stories/themes.php"] [unique_id "amVejKqkUsWScGn0mm9NOgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 19:34:21 (1 day ago)	(mod_security) mod_security (id:240000) triggered by 45.133.6.39 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.6.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 15:34:15.928795 2026] [security2:error] [pid 31531:tid 31531] [client 45.133.6.39:50847] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.hope4elsalvador.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.hope4elsalvador.org"] [uri "/images/stories/themes.php"] [unique_id "amUPt-rSnKzO4zEZs4uN-wAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-07-22 14:00:03 (4 days ago)	crowdsecurity/http-backdoors-attempts	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-07-22 12:03:14 (4 days ago)	Aggressive web search of vulnerable pages: /wp-admin/css/colors/ocean/wp-login.php /wp-content/plugi ... show more Aggressive web search of vulnerable pages: /wp-admin/css/colors/ocean/wp-login.php /wp-content/plugins/wp-conflg.php /.well-known/classwithtost ... show less	Web App Attack
🇳🇱 Site.eu	2026-07-21 19:39:09 (5 days ago)	Excessive 404/403 errors	Brute-Force
🇧🇪 cmbplf	2026-07-12 15:13:46 (2 weeks ago)	399 requests with url.path /.well-known/acme-challenge/.php 288 requests with url.path /.well-k ... show more 399 requests with url.path /.well-known/acme-challenge/.php 288 requests with url.path /.well-known/pki-validation/*.php show less	Brute-Force Bad Web Bot
Anonymous	2026-07-12 14:41:20 (2 weeks ago)	[ssd5.kdns.gr] httpd-suspicious-path: sites=www.all4animal.com; logs=/var/log/httpd/domains/all4anim ... show more [ssd5.kdns.gr] httpd-suspicious-path: sites=www.all4animal.com; logs=/var/log/httpd/domains/all4animal.com.log; samples=/wp-includes/class-wp-taxonomy.editor.php \| /wp-content/plugins/pwnd/dedi1.php \| /wp-includes/js/wp-conflg.php show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-07-10 04:12:20 (2 weeks ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 dynamix	2026-07-04 09:54:42 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 04:54:01 (3 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.133.6.39 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.6.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:53:57.407617 2026] [security2:error] [pid 11586:tid 11586] [client 45.133.6.39:60513] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|fulltime-life.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "fulltime-life.com"] [uri "/images/stories/themes.php"] [unique_id "akiR5Yt1bVv_mx-0rDf4zAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-03 07:32:54 (3 weeks ago)	Excessive 404/403 errors	Brute-Force
🇬🇧 consul.to	2026-07-03 05:17:38 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-07-03 00:13:39 (3 weeks ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-195)	Hacking
🇺🇸 TPI-Abuse	2026-06-28 23:38:39 (4 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.133.6.39 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.6.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 19:38:31.264225 2026] [security2:error] [pid 3851:tid 3851] [client 45.133.6.39:25617] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|web142.dnchosting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "web142.dnchosting.com"] [uri "/images/stories/themes.php"] [unique_id "akGwdxXBp2pS_tfXU9mwyAAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 92 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 171.25.158.82

🇸🇦 188.54.229.147

🇺🇸 172.215.212.98

🇮🇳 123.253.162.254

🇺🇸 104.248.65.244

🇺🇸 64.62.197.40

🇺🇸 47.251.114.93

🇩🇪 46.101.211.206

🇬🇧 5.69.218.173

🇳🇵 2405:acc0:1304:2c27:5871:42de:a6fa:ca01

🇧🇷 200.106.212.146

🇲🇽 187.155.51.85

🇩🇴 186.120.179.222

🇳🇱 185.223.235.43

🇺🇸 91.230.168.215

🇺🇸 91.230.168.92

🇺🇸 66.240.219.146

🇩🇪 57.129.47.135

🇵🇪 45.191.99.92

🇳🇱 45.156.87.162