JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.6.99

45.133.6.99 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 48%: ?

48%

ISP	VPN-Consumer-AU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇦🇺 Australia
City	Perth, Western Australia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.6.99

Whois 45.133.6.99

IP Abuse Reports for 45.133.6.99:

This IP address has been reported a total of 104 times from 50 distinct sources. 45.133.6.99 was first reported on November 14th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-07-29 15:50:58 (1 day ago)	Aggressive web search of vulnerable pages: /zwso.php /chosen.php /about.php /admin.php /mah.php /.wp ... show more Aggressive web search of vulnerable pages: /zwso.php /chosen.php /about.php /admin.php /mah.php /.wp/wso.php /core.php /robots.php /inputs.php ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:42:22 (3 days ago)	(mod_security) mod_security (id:240000) triggered by 45.133.6.99 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.6.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:42:16.651338 2026] [security2:error] [pid 500937:tid 500937] [client 45.133.6.99:54831] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|thegoldentether.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "thegoldentether.com"] [uri "/images/stories/themes.php"] [unique_id "amdEGNlfRLHR91qryUh3KAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-25 07:22:55 (5 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2026-07-21 12:56:50 (1 week ago)	Multiple WAF Violations	Web App Attack
🇫🇮 YF	2026-07-20 19:00:36 (1 week ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇺🇸 IndigoRidge	2026-07-18 00:33:49 (1 week ago)	45.133.6.99 - - [17/Jul/2026:20:33:43 -0400] "GET /wp-content/plugins/elementor/includes/interfaces/ ... show more 45.133.6.99 - - [17/Jul/2026:20:33:43 -0400] "GET /wp-content/plugins/elementor/includes/interfaces/about.php HTTP/1.0" 404 41287 "http://mygreenvilleschouse.com/wp-content/plugins/elementor/includes/interfaces/about.php" "Go-http-client/2.0" 45.133.6.99 - - [17/Jul/2026:20:33:45 -0400] "GET /wp-content/plugins/wp-cache-sys/ HTTP/1.0" 404 41287 "https://www.mygreenvilleschouse.com/wp-content/plugins/wp-cache-sys/index.php" "Go-http-client/2.0" 45.133.6.99 - - [17/Jul/2026:20:33:46 -0400] "GET /wp-content/plugins/aatdgetgdg/main.php HTTP/1.0" 404 41287 "http://mygreenvilleschouse.com/wp-content/plugins/aatdgetgdg/main.php" "Go-http-client/2.0" 45.133.6.99 - - [17/Jul/2026:20:33:47 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.0" 404 41287 "http://mygreenvilleschouse.com/wp-content/plugins/pwnd/pwnd.php" "Go-http-client/2.0" 45.133.6.99 - - [17/Jul/2026:20:33:48 -0400] "GET /wp-content/plugins/StylePlugin/up.php HTTP/1.0" 404 41287 "http://mygreenvilleschouse.com/wp-content/plugin ... show less	Web App Attack
🇪🇸 masterguru	2026-07-17 17:09:43 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇬🇧 consul.to	2026-07-17 07:29:53 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-07-16 01:51:56 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇩🇰 ScamAware	2026-06-30 15:08:39 (1 month ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 15. Unique request paths counted internally: 15. Cloudflare action: block. Cloudflare source: firewallCustom. show less	Web App Attack
🇳🇱 Site.eu	2026-06-30 00:30:05 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 Octopuce	2026-06-30 00:11:21 (1 month ago)	Aggressive web search of vulnerable pages: /wp-includes/SimplePie/index.php /wp-admin/images/admin.p ... show more Aggressive web search of vulnerable pages: /wp-includes/SimplePie/index.php /wp-admin/images/admin.php /wp-includes/theme-compat/about.php /abo ... show less	Web App Attack
Anonymous	2026-06-21 18:05:51 (1 month ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (13/60 min)'; Requests=13	Port Scan
🇳🇱 Site.eu	2026-06-18 18:00:41 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇬🇧 consul.to	2026-05-18 13:02:47 (2 months ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.226

🇺🇸 207.135.224.94

🇵🇱 194.180.48.237

🇨🇳 192.144.253.229

🇭🇰 103.210.22.17

🇫🇷 91.196.152.197

🇧🇪 91.86.27.61

🇮🇹 89.46.107.210

🇮🇳 77.83.68.81

🇳🇱 45.148.10.151

🇸🇬 43.156.115.178

🇬🇧 35.203.211.149

🇬🇧 35.203.210.79

🇦🇺 212.70.16.19

🇧🇷 205.210.31.204

🇮🇩 182.8.225.186

🇻🇳 171.228.171.188

🇹🇭 158.46.175.89

🇧🇯 137.255.13.181

🇰🇪 102.0.2.210