JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.67.96.11

45.67.96.11 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 39%: ?

39%

ISP	VPN Consumer Sydney, Australia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.67.96.11

Whois 45.67.96.11

IP Abuse Reports for 45.67.96.11:

This IP address has been reported a total of 43 times from 25 distinct sources. 45.67.96.11 was first reported on December 4th 2020, and the most recent report was 17 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-09-19 19:19:59 (17 minutes ago)	Excessive 404/403 errors	Brute-Force
🇨🇿 plzenskypruvodce.cz	2026-09-19 12:01:09 (7 hours ago)	[Sat Sep 19 14:00:43.807795 2026] [authz_core:error] [pid 560641:tid 560679] [client 45.67.96.11:512 ... show more [Sat Sep 19 14:00:43.807795 2026] [authz_core:error] [pid 560641:tid 560679] [client 45.67.96.11:51217] AH01630: client denied by server configuration: /var/www/baletniskola-ok.cz/www/wp-content/index.php [Sat Sep 19 14:01:07.374003 2026] [authz_core:error] [pid 560641:tid 560684] [client 45.67.96.11:55893] AH01630: client denied by server configuration: /var/www/baletniskola-ok.cz/www/wp-includes/SimplePie/index.php ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 13:42:20 (3 days ago)	(mod_security) mod_security (id:240000) triggered by 45.67.96.11 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.67.96.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:42:15.054263 2026] [security2:error] [pid 24007:tid 24007] [client 45.67.96.11:39263] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|georgelaceysales.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "georgelaceysales.com"] [uri "/images/stories/themes.php"] [unique_id "aqqctz72Krc1wQBblCuvrwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-16 11:23:01 (3 days ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-09-15 01:37:28 (4 days ago)	IP matched detection query many 3xx errors.	Brute-Force
🇫🇷 dynamix	2026-09-09 10:59:03 (1 week ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-09-09 10:28:31 (1 week ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 dynamix	2026-08-06 11:56:23 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 05:11:04 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 45.67.96.11 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.67.96.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 01:10:54.747647 2026] [security2:error] [pid 17661:tid 17661] [client 45.67.96.11:27993] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.ezsmiledental.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.ezsmiledental.com"] [uri "/images/stories/themes.php"] [unique_id "amboXnWLK8hn9Q1jUwq4YwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-26 10:04:49 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇪 vaia.cloud	2026-07-21 22:45:02 (1 month ago)	crowdsecurity/http-backdoors-attempts	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-21 11:27:22 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 22:49:40 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 45.67.96.11 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.67.96.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 18:49:34.089716 2026] [security2:error] [pid 1630381:tid 1630381] [client 45.67.96.11:26369] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|anbruswebdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "anbruswebdesign.com"] [uri "/images/stories/themes.php"] [unique_id "al6l_hUe4WSQLVNex3n79wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-20 13:27:47 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-07-18 05:12:49 (2 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 143.105.135.115

🇨🇭 104.244.74.84

🇮🇳 103.53.36.208

🇸🇬 103.20.122.54

🇱🇹 62.60.130.253

🇰🇷 49.247.138.161

🇺🇸 47.88.5.56

🇦🇺 35.244.76.219

🇺🇸 23.191.200.61

🇺🇸 198.23.196.175

🇳🇱 193.47.62.69

🇺🇸 162.216.150.243

🇮🇳 122.171.129.174

🇭🇰 119.28.89.249

🇧🇬 109.160.32.75

🇺🇸 107.132.153.59

🇺🇸 104.28.214.112

🇺🇸 70.183.198.239

🇺🇸 47.254.16.187

🇳🇱 45.198.224.120