JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.6.90

45.133.6.90 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 44%: ?

44%

ISP	VPN-Consumer-AU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇦🇺 Australia
City	Perth, Western Australia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.6.90

Whois 45.133.6.90

IP Abuse Reports for 45.133.6.90:

This IP address has been reported a total of 111 times from 62 distinct sources. 45.133.6.90 was first reported on May 26th 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 todix	2026-07-17 16:25:59 (1 hour ago)	Web App Attack Exploid from 45.133.6.90	Web App Attack
🇬🇧 consul.to	2026-07-16 19:23:34 (22 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-07-16 01:57:28 (1 day ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-07-15 13:29:38 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 dynamix	2026-07-09 07:46:07 (1 week ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 04:49:34 (2 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.133.6.90 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.6.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 00:49:26.440030 2026] [security2:error] [pid 10546:tid 10546] [client 45.133.6.90:64249] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|bluedogzero.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "bluedogzero.com"] [uri "/images/stories/themes.php"] [unique_id "akNK1qspy_j7M9HIb3wydgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-06-30 00:16:35 (2 weeks ago)	Aggressive web search of vulnerable pages: /style.php /wp-includes/assets/script-modules-packages.mi ... show more Aggressive web search of vulnerable pages: /style.php /wp-includes/assets/script-modules-packages.min-meta.php /wp-includes/widgets/bypass.php ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 16:15:16 (3 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.133.6.90 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.6.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 12:15:13.037969 2026] [security2:error] [pid 14461:tid 14461] [client 45.133.6.90:58995] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|galeriedorion.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "galeriedorion.com"] [uri "/images/stories/themes.php"] [unique_id "aja8kYFPZGbzhC7D7W5MCQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-05 08:52:26 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 45.133.6.9 ... show more (apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 45.133.6.90 (AU/Australia/-): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.133.6.90 - - [05/Jun/2026:10:52:22 +0200] "GET /wp-content/themes/theme-check/theme-check.php HTTP/1.1" 301 565 "-" "Go-http-client/1.1" 45.133.6.90 - - [05/Jun/2026:10:52:22 +0200] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 563 "-" "Go-http-client/1.1" 45.133.6.90 - - [05/Jun/2026:10:52:23 +0200] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 561 "-" "Go-http-client/1.1" 45.133.6.90 - - [05/Jun/2026:10:52:23 +0200] "GET /wp-content/plugins/dzs-zoomsounds/1877.php HTTP/1.1" 301 559 "-" "Go-http-client/1.1" 45.133.6.90 - - [05/Jun/2026:10:52:24 +0200] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 559 "-" "Go-http-client/1.1" show less	Port Scan
🇬🇧 consul.to	2026-06-05 07:25:00 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇸🇬 securejdprop	2026-05-30 15:01:34 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇿🇦 Tokolosh Hunters	2026-05-19 00:17:45 (1 month ago)	AutoBlockWindow-Known bad useragent query-2026-05-19 00:17:44	Bad Web Bot
🇩🇪 ghostwarriors	2026-05-18 18:20:27 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-05-18 18:15:45 (1 month ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇵🇱 nfsec.pl	2026-05-18 15:37:23 (1 month ago)	45.133.6.90 - - [18/May/2026:15:37:19 +0000] "GET /modules/onlinechat2028/az.php HTTP/2.0" 404 24680 ... show more 45.133.6.90 - - [18/May/2026:15:37:19 +0000] "GET /modules/onlinechat2028/az.php HTTP/2.0" 404 24680 "http://nfsec.pl//modules/onlinechat2028/az.php" "Go-http-client/2.0" 45.133.6.90 - - [18/May/2026:15:37:19 +0000] "GET /modules/sendinblue/numberv2.php HTTP/2.0" 404 23964 "http://nfsec.pl//modules/sendinblue/numberv2.php" "Go-http-client/2.0" 45.133.6.90 - - [18/May/2026:15:37:21 +0000] "GET /themes/freshfood/ HTTP/2.0" 404 23913 "https://nfsec.pl/themes/freshfood/index.php" "Go-http-client/2.0" 45.133.6.90 - - [18/May/2026:15:37:22 +0000] "GET /themes/probusiness/ HTTP/2.0" 404 24012 "https://nfsec.pl/themes/probusiness/index.php" "Go-http-client/2.0" 45.133.6.90 - - [18/May/2026:15:37:23 +0000] "GET /themes/sikpo/1.php HTTP/2.0" 404 23992 "http://nfsec.pl//themes/sikpo/1.php" "Go-http-client/2.0" ... show less	Web App Attack Exploited Host

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.221.7.169

🇮🇶 138.124.158.150

🇨🇦 85.217.149.55

🇨🇳 59.36.211.132

🇮🇳 49.43.5.6

🇭🇰 47.242.60.180

🇳🇱 45.148.10.183

🇨🇦 20.220.225.223

🇨🇳 14.103.118.79

🇨🇳 222.92.61.242

🇰🇷 211.46.177.174

🇮🇩 103.99.214.143

🇲🇩 95.153.102.15

🇫🇷 85.217.140.39

🇬🇧 193.46.0.254

🇲🇽 189.190.173.73

🇵🇰 103.134.0.139

🇺🇸 45.79.115.134

🇺🇸 18.237.74.152

🇺🇸 172.253.195.211