JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.6.61

45.133.6.61 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 55%: ?

55%

ISP	VPN-Consumer-AU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇦🇺 Australia
City	Perth, Western Australia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.6.61

Whois 45.133.6.61

IP Abuse Reports for 45.133.6.61:

This IP address has been reported a total of 105 times from 53 distinct sources. 45.133.6.61 was first reported on November 22nd 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-07-17 17:13:51 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇲🇾 Rizzy	2026-07-17 07:39:57 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 pltcldvlpr	2026-07-17 06:19:14 (1 day ago)	Bogus Useragent: 45.133.6.61 - - [17/Jul/2026:08:19:14 +0200] "GET /lock360.php HTTP/1.1" 301 178 "- ... show more Bogus Useragent: 45.133.6.61 - - [17/Jul/2026:08:19:14 +0200] "GET /lock360.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" asn=137409 org="GSL Networks Pty LTD" country=AU ... show less	Bad Web Bot
🇫🇷 dynamix	2026-07-16 08:32:41 (2 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 jsjdmediallc	2026-07-16 03:00:08 (2 days ago)	Auto-blocked: score 718 (threshold 10). Tier: CRITICAL. Hits: 319. Flags: error-scan, info-file, web ... show more Auto-blocked: score 718 (threshold 10). Tier: CRITICAL. Hits: 319. Flags: error-scan, info-file, webshell, wp-login, wp-install, cgi-bin, php-in-uploads, vendor-probe, config-file, wp-signup, pki-probe, joomla-component. Paths: /ab.php, /.well-known/index.php, /cc.php, /as.php, /wp-admin/css/colors/ectoplasm/about.php show less	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-15 18:23:40 (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 23:10:10 (3 days ago)	(mod_security) mod_security (id:240000) triggered by 45.133.6.61 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.6.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 19:10:02.456917 2026] [security2:error] [pid 4009:tid 4093] [client 45.133.6.61:33389] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|myrtlebeachdiet.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "myrtlebeachdiet.com"] [uri "/images/stories/themes.php"] [unique_id "albByg-taPxkNAKfpZgOnwAAAII"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-09 07:44:10 (1 week ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2026-07-08 02:35:53 (1 week ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-07-06 23:16:39 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-06-30 14:50:40 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-06-30 06:14:45 (2 weeks ago)	Aggressive web search of vulnerable pages: /.well-known/acme-challenge/install.php /.well-known/acme ... show more Aggressive web search of vulnerable pages: /.well-known/acme-challenge/install.php /.well-known/acme-challenge/plugins.php /.well-known/acme-ch ... show less	Web App Attack
🇩🇪 Admin-Gito	2026-06-18 12:28:20 (1 month ago)	45.133.6.61 - - [18/Jun/2026:14:21:32 +0200] "GET /wp-includes/customize/class-wp-customize-nav-menu ... show more 45.133.6.61 - - [18/Jun/2026:14:21:32 +0200] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 404 290744 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.6.61 - - [18/Jun/2026:14:21:35 +0200] "GET /wp-includes/db.php HTTP/1.1" 404 290693 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.6.61 - - [18/Jun/2026:14:21:36 +0200] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 404 290718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.6.61 - - [18/Jun/2026:14:21:38 +0200] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 404 290706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.6.61 - - [18/Jun/2026:14:21:39 +0200] "GET /wp-in ... show less	Web App Attack
🇦🇺 2000cn.com.au	2026-06-05 12:52:24 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Web App Attack Hacking
🇬🇧 consul.to	2026-06-05 07:21:34 (1 month ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 212.73.148.30

🇰🇷 211.106.133.202

🇺🇸 205.210.31.55

🇩🇪 185.242.3.195

🇵🇱 176.53.159.197

🇺🇸 147.185.132.183

🇪🇸 130.195.250.84

🇲🇦 105.159.159.53

🇱🇹 45.227.254.170

🇬🇧 35.203.211.133

🇺🇸 20.65.194.57

🇺🇸 205.210.31.93

🇳🇱 160.119.71.136

🇰🇷 112.164.240.110

🇫🇷 92.222.104.221

🇫🇷 139.28.219.70

🇵🇰 125.62.88.41

🇱🇹 81.30.98.47

🇺🇸 8.221.121.6

🇺🇸 216.24.212.47