JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.67.96.66

45.67.96.66 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 38%: ?

38%

ISP	VPN Consumer Sydney, Australia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.67.96.66

Whois 45.67.96.66

IP Abuse Reports for 45.67.96.66:

This IP address has been reported a total of 28 times from 20 distinct sources. 45.67.96.66 was first reported on May 1st 2021, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-07-23 02:07:38 (17 hours ago)	Aggressive web search of vulnerable pages: /wp-content/x/ /wp-includes/assets/ /wp-includes/fonts/ / ... show more Aggressive web search of vulnerable pages: /wp-content/x/ /wp-includes/assets/ /wp-includes/fonts/ /autoload_classmap/ /wp-content/themes/tflow ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 04:49:30 (2 days ago)	(mod_security) mod_security (id:240000) triggered by 45.67.96.66 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.67.96.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 00:49:24.652640 2026] [security2:error] [pid 1981058:tid 1981058] [client 45.67.96.66:60463] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|redlinechemical.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "redlinechemical.com"] [uri "/images/stories/themes.php"] [unique_id "al76VHviuc8ibUUgO6-42wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-20 06:12:37 (3 days ago)	Multiple WAF Violations	Web App Attack
🇸🇪 vaia.cloud	2026-07-19 21:25:02 (3 days ago)	crowdsecurity/http-backdoors-attempts	Brute-Force Web App Attack
Anonymous	2026-07-19 01:06:04 (4 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (21/60 min)'; Requests=21	Port Scan
🇺🇸 TPI-Abuse	2026-07-18 12:29:29 (5 days ago)	(mod_security) mod_security (id:240000) triggered by 45.67.96.66 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.67.96.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 08:29:25.168972 2026] [security2:error] [pid 5376:tid 5376] [client 45.67.96.66:61233] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|talkingmess.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "talkingmess.com"] [uri "/images/stories/themes.php"] [unique_id "altxpc6geK6Lyma30AdEjAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-18 00:58:10 (5 days ago)	Multiple WAF Violations	Web App Attack
🇳🇱 tmiland	2026-06-24 21:46:54 (4 weeks ago)	(wordpress_404) WordPress Plugins Honeypot Trap 45.67.96.66 (AU/Australia/-): 2 in the last 3600 sec ... show more (wordpress_404) WordPress Plugins Honeypot Trap 45.67.96.66 (AU/Australia/-): 2 in the last 3600 secs; IP: 45.67.96.66; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.67.96.66 - - [24/Jun/2026:23:46:48 +0200] "GET /wp-content/plugins/SecurityFin/SecurityFin.php HTTP/1.1" 404 2992 "http://./wp-content/plugins/SecurityFin/SecurityFin.php" "Go-http-client/1.1" 45.67.96.66 - - [24/Jun/2026:23:46:49 +0200] "GET /wp-content/plugins/file-upload-types/assets/css/403x.php HTTP/1.1" 404 2992 "http://.*/wp-content/plugins/file-upload-types/assets/css/403x.php" "Go-http-client/1.1" show less	Brute-Force
🇺🇸 vanguardm	2026-04-13 02:15:04 (3 months ago)	Automated report: 28 events detected. Types: web-attack	Web App Attack
🇩🇪 Mr-Money	2026-03-24 13:13:12 (3 months ago)	scenario: crowdsecurity/http-probing - events: 11	Web App Attack Hacking
🇨🇭 backslash	2026-03-17 11:42:04 (4 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 HERA - Operations	2026-03-17 10:33:26 (4 months ago)	argeforum - searching for vulnerable scripts: index.php 2026/03/17 11:33:26	Web App Attack
Anonymous	2026-03-17 06:50:02 (4 months ago)	\| [Dangerous/Australia] Aggressive IP 45.67.96.66 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/Australia] Aggressive IP 45.67.96.66 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇫🇷 Octopuce	2026-03-16 10:11:03 (4 months ago)	Aggressive web search of vulnerable pages: /.well-known/acme-challenge/admin.php /wp-includes/images ... show more Aggressive web search of vulnerable pages: /.well-known/acme-challenge/admin.php /wp-includes/images/autoload_classmap.php /wp-includes/ID3/wp- ... show less	Web App Attack
🇳🇱 EGP Abuse Dept	2026-02-28 11:52:36 (4 months ago)	Scanning for port/service exploits on tpc-029.mach3builders.nl	Port Scan Hacking

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 203.88.119.100

🇧🇪 198.235.24.131

🇫🇷 185.177.72.17

🇫🇷 92.205.161.6

🇩🇪 213.209.159.227

🇻🇳 116.96.45.96

🇺🇸 81.30.98.204

🇩🇪 45.135.141.16

🇸🇪 45.84.107.128

🇸🇬 43.128.111.31

🇮🇷 2.180.32.104

🇮🇱 2.55.100.104

🇺🇸 2602:80d:1008::9b

🇨🇴 186.30.186.118

🇳🇱 185.242.226.11

🇨🇴 179.1.234.2

🇺🇸 162.216.150.184

🇺🇸 154.16.115.34

🇨🇳 115.191.40.50

🇺🇸 74.249.128.248