JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.67.96.123

45.67.96.123 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 46%: ?

46%

ISP	VPN Consumer Sydney, Australia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.67.96.123

Whois 45.67.96.123

IP Abuse Reports for 45.67.96.123:

This IP address has been reported a total of 39 times from 25 distinct sources. 45.67.96.123 was first reported on November 4th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-07-19 15:10:13 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇭🇺 Adorjan Daczo	2026-07-19 04:26:37 (1 day ago)	Probe for vulnerabilities. Path attempted: /wp-content/plugins/pwnd/pwnd.php	Web App Attack
🇨🇭 backslash	2026-07-18 17:36:01 (2 days ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇳🇿 Antinson	2026-07-17 01:32:23 (4 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇬🇧 consul.to	2026-07-16 20:58:22 (4 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Ba-Yu	2026-07-15 04:42:38 (5 days ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 14:02:43 (2 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.67.96.123 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.67.96.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 10:02:38.090464 2026] [security2:error] [pid 1525:tid 1525] [client 45.67.96.123:46093] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|architx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "architx.com"] [uri "/images/stories/themes.php"] [unique_id "akPMfroZ6uuV7HIYBhNrGQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 04:09:48 (3 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.67.96.123 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.67.96.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 00:09:43.406849 2026] [security2:error] [pid 28647:tid 28751] [client 45.67.96.123:55323] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|hooknpatch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hooknpatch.com"] [uri "/images/stories/themes.php"] [unique_id "akCeh7JPhoyGs4UlJwKz7QAAANI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 19:34:20 (3 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.67.96.123 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.67.96.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 15:34:13.949073 2026] [security2:error] [pid 12057:tid 12068] [client 45.67.96.123:63319] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|petsentiments.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "petsentiments.com"] [uri "/images/stories/themes.php"] [unique_id "akAltV88rrEyyt82BM_LeAAAAUk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 23:27:49 (3 weeks ago)	(mod_security) mod_security (id:240000) triggered by 45.67.96.123 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.67.96.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 19:27:44.855452 2026] [security2:error] [pid 21868:tid 21868] [client 45.67.96.123:39857] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|johnprimerano.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "johnprimerano.com"] [uri "/images/stories/themes.php"] [unique_id "aj25cF0ApOvm7LZI9i7DoAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-25 17:29:21 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-24 15:57:28 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-21 14:08:36 (4 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇷🇺 sms.ru	2026-06-21 04:39:45 (4 weeks ago)	/wp-admin/theme-editor.php	Web App Attack
🇳🇿 Antinson	2026-06-19 02:02:53 (1 month ago)	Scraping with a high error ratio and request rate	Bad Web Bot

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 209.50.182.157

🇧🇷 179.63.113.169

🇺🇸 167.172.203.111

🇻🇳 125.212.217.143

🇨🇳 119.3.162.103

🇮🇳 103.126.6.145

🇨🇳 101.126.145.49

🇺🇸 91.230.168.129

🇨🇦 85.217.149.24

🇬🇧 5.252.83.16

🇷🇴 193.46.255.86

🇬🇧 193.32.209.245

🇬🇧 152.32.157.92

🇸🇬 118.26.111.107

🇻🇳 103.78.0.229

🇺🇸 100.49.117.77

🇮🇶 91.192.6.238

🇺🇸 74.208.126.89

🇺🇸 66.132.195.105

🇨🇦 51.222.155.186