JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.7.137

45.133.7.137 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 48%: ?

48%

ISP	VPN-Consumer-NZ
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇳🇿 New Zealand
City	Auckland, Auckland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.7.137

Whois 45.133.7.137

IP Abuse Reports for 45.133.7.137:

This IP address has been reported a total of 125 times from 51 distinct sources. 45.133.7.137 was first reported on August 12th 2024, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-08-25 07:09:05 (22 hours ago)	Multiple WAF Violations	Web App Attack
🇫🇷 adembaysal	2026-08-23 18:22:06 (2 days ago)	Domain : kvkkasistan.com Rule : admin 2026-08-23 18:13:06 *hidden-privacy* GET /wp-admin/css/col ... show more Domain : kvkkasistan.com Rule : admin 2026-08-23 18:13:06 *hidden-privacy* GET /wp-admin/css/colors/blue/admin.php - 80 - 45.133.7.137 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36 - kvkkasistan.com 404 5 0 1519 221 302 - - show less	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 23:27:13 (3 days ago)	(mod_security) mod_security (id:240000) triggered by 45.133.7.137 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.133.7.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 19:27:08.156900 2026] [security2:error] [pid 7504:tid 7523] [client 45.133.7.137:44697] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|wallstreetglobe.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "wallstreetglobe.com"] [uri "/images/stories/themes.php"] [unique_id "aoowTBODXcttROTuWF0czAAAARE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-22 16:09:29 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 Major Hostility	2026-08-21 13:47:41 (4 days ago)	"GET /.trash7206/index.php HTTP/1.1" 404 "GET /storage/framework/views/core.php HTTP/1.1" 404 "GET / ... show more "GET /.trash7206/index.php HTTP/1.1" 404 "GET /storage/framework/views/core.php HTTP/1.1" 404 "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 404 "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 404 "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 404 "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 404 "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 404 "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 404 "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 404 "GET /wp-admin/dofault.php HTTP/1.1" 404 "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 404 "GET /wp-content/plugins/advanced-product-fields-for-wo show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 13:40:21 (4 days ago)	(mod_security) mod_security (id:240000) triggered by 45.133.7.137 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.133.7.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 09:40:17.070624 2026] [security2:error] [pid 9072:tid 9072] [client 45.133.7.137:0] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|luisguacache.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "luisguacache.com"] [uri "/images/stories/themes.php"] [unique_id "aohVQYZN0N4f013aFb35SQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-19 12:56:16 (6 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-08-16 06:33:12 (1 week ago)	Aggressive web search of vulnerable pages: /wp-admin/maint/bootstrap.php /themes/zMousse/otuz1.php / ... show more Aggressive web search of vulnerable pages: /wp-admin/maint/bootstrap.php /themes/zMousse/otuz1.php /wp-content/edit-wolf.php /wp-content/plugin ... show less	Web App Attack
🇹🇷 neron	2026-08-15 23:06:48 (1 week ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-08 04:29:21 (2 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-30 23:06:19 (3 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇫🇷 dynamix	2026-07-27 14:25:14 (4 weeks ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-07-21 02:25:16 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-07-20 23:56:28 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 11:36:51 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 45.133.7.137 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.133.7.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 07:36:46.984821 2026] [security2:error] [pid 2920006:tid 2920006] [client 45.133.7.137:46083] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|xmlprotocol.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "xmlprotocol.com"] [uri "/images/stories/themes.php"] [unique_id "al4ITs3iTWgdaVcELhGkywAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.212

🇨🇳 117.156.86.212

🇻🇳 103.200.23.107

🇮🇩 103.126.30.97

🇩🇪 69.5.169.48

🇧🇪 34.14.44.93

🇮🇳 223.178.213.84

🇷🇺 213.180.203.5

🇺🇸 205.210.31.75

🇧🇷 187.103.162.16

🇧🇷 168.194.164.3

🇺🇸 148.72.64.32

🇫🇮 147.185.133.113

🇨🇳 117.187.120.188

🇷🇺 95.165.153.88

🇳🇱 91.92.47.90

🇨🇳 58.19.131.231

🇲🇾 47.250.47.47

🇲🇩 46.55.119.227

🇩🇪 43.157.52.37