JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.112.233

45.133.112.233 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 52%: ?

52%

ISP	Atlas Network Holdings LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	atlasnetworkholdings.online
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.112.233

Whois 45.133.112.233

IP Abuse Reports for 45.133.112.233:

This IP address has been reported a total of 15 times from 12 distinct sources. 45.133.112.233 was first reported on April 19th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-09-18 10:24:03 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇩🇪 FeG Deutschland	2026-09-16 14:59:54 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇩🇪 Hazzard	2026-09-16 14:49:07 (3 days ago)	(wordpress) Failed wordpress login from 45.133.112.233 (US/United States/-/-/-/[redacted]): (CF_ENA ... show more (wordpress) Failed wordpress login from 45.133.112.233 (US/United States/-/-/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇩🇪 LRob	2026-09-16 12:48:15 (3 days ago)	WordPress login brute-force \| path: /xmlrpc.php \| 2026-09-16 12:48 UTC	Brute-Force Web App Attack
🇨🇦 DRI	2026-09-15 15:56:26 (4 days ago)	Web attack/Malicious activity detected	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 00:31:05 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 45.133.112.233 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.133.112.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 20:30:58.436283 2026] [security2:error] [pid 3935:tid 3935] [client 45.133.112.233:64619] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mpservice.com.sv\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mpservice.com.sv"] [uri "/wp-json/wp/v2/users"] [unique_id "aqiRwsnZoDBMGDFJJftbrQAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 OnTheEdge	2026-09-14 12:41:52 (5 days ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇨🇿 Countryman	2026-09-12 00:10:01 (1 week ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇭 SOC [GOLINE SA]	2026-09-09 13:25:41 (1 week ago)	[RoutePulse \| 2026-09-09T13:25:41Z \| RTBH-INJECTED] ATTACK CLASS: vpn_bruteforce SOURCE: 45.133.112. ... show more [RoutePulse \| 2026-09-09T13:25:41Z \| RTBH-INJECTED] ATTACK CLASS: vpn_bruteforce SOURCE: 45.133.112.233 · AS213954 Global Transit Systems LLC · United States EVIDENCE: Shunned on the Cisco FTD VPN gateway — Cisco VPN RA Brute force on Cisco FTDv — distributed attack (3 attempts/15min) — shun on the VPN gateway DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring ACTION: BGP null route injected at RoutePulse network edge show less	Brute-Force Hacking
🇺🇸 TPI-Abuse	2026-08-24 17:02:43 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 45.133.112.233 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.133.112.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 13:02:36.020519 2026] [security2:error] [pid 2050:tid 2050] [client 45.133.112.233:61367] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Colors/Thumbs.db"] [unique_id "aox5LLwZVqyikYkBbHeKMQAAABA"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Colors/ show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-08-10 00:57:58 (1 month ago)	(mod_security) mod_security (id:900178) triggered by 45.133.112.233 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:900178) triggered by 45.133.112.233 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇫🇷 masterguru	2026-06-15 10:46:59 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.133.112.233 (NL/The Netherlands/-): 1 in th ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.133.112.233 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 HandyTreff.de	2026-06-06 13:42:32 (3 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -49.105 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -49.105 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1813.1 show less	Web App Attack Bad Web Bot
🇨🇭 backslash	2026-06-05 03:48:00 (3 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇨🇭 backslash	2026-04-19 05:15:16 (5 months ago)		Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 154.73.17.26

🇫🇮 147.185.133.44

🇹🇼 114.35.114.164

🇭🇰 103.117.145.130

🇩🇪 87.106.201.203

🇺🇸 73.183.74.177

🇫🇷 62.171.169.75

🇲🇾 49.124.152.170

🇧🇪 34.78.124.51

🇷🇴 2.57.122.150

🇭🇰 202.155.236.242

🇦🇷 191.82.98.98

🇮🇳 182.73.176.186

🇮🇩 163.7.8.79

🇳🇱 146.103.119.8

🇻🇳 117.7.151.175

🇧🇬 109.160.32.205

🇳🇱 89.248.172.11

🇮🇩 43.165.195.234

🇺🇸 40.124.178.90