JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.7.28

45.133.7.28 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 59%: ?

59%

ISP	VPN-Consumer-NZ
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇳🇿 New Zealand
City	Auckland, Auckland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.7.28

Whois 45.133.7.28

IP Abuse Reports for 45.133.7.28:

This IP address has been reported a total of 85 times from 44 distinct sources. 45.133.7.28 was first reported on September 10th 2023, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-06-22 15:50:35 (17 hours ago)	Aggressive web search of vulnerable pages: /wp-includes/rest-api/endpoints/index.php /wp-content/lan ... show more Aggressive web search of vulnerable pages: /wp-includes/rest-api/endpoints/index.php /wp-content/languages/about.php /wp-content/plugins/wp-the ... show less	Web App Attack
🇫🇷 dynamix	2026-06-22 14:45:34 (18 hours ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-06-22 09:32:01 (23 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-06-21 20:53:43 (1 day ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)	Hacking
🇺🇸 TPI-Abuse	2026-06-20 22:54:31 (2 days ago)	(mod_security) mod_security (id:240000) triggered by 45.133.7.28 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.7.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 18:54:23.821457 2026] [security2:error] [pid 1158:tid 1158] [client 45.133.7.28:24661] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|marat.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "marat.info"] [uri "/images/stories/themes.php"] [unique_id "ajcaH30aJGRvQriJP26ztgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-20 20:56:40 (2 days ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-06-20 19:59:48 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 00:05:34 (4 days ago)	(mod_security) mod_security (id:240000) triggered by 45.133.7.28 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.7.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 20:05:28.869136 2026] [security2:error] [pid 12716:tid 12716] [client 45.133.7.28:23859] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|dankent.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "dankent.com"] [uri "/images/stories/themes.php"] [unique_id "ajSHyMC58u30l5-GHU9U_gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 threatintelligence_bvc	2026-06-13 18:42:35 (1 week ago)		Brute-Force
🇺🇸 threatintelligence_bvc	2026-06-09 01:57:40 (2 weeks ago)		Brute-Force
🇪🇸 masterguru	2026-05-26 11:38:49 (3 weeks ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:user-agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
Anonymous	2026-05-25 23:49:30 (4 weeks ago)	45.133.7.28 - - [26/May/2026:01:49:30 +0200] "GET //templates/Genius/ HTTP/1.1" 301 169 "-" "Go-http ... show more 45.133.7.28 - - [26/May/2026:01:49:30 +0200] "GET //templates/Genius/ HTTP/1.1" 301 169 "-" "Go-http-client/1.1" show less	Bad Web Bot
🇨🇭 Origon	2026-05-23 07:32:39 (1 month ago)	http-wordpress-scan - IP: 45.133.7.28 - time="2026-05-23T09:32:39+02:00" level=info msg="(555f66b4f ... show more http-wordpress-scan - IP: 45.133.7.28 - time="2026-05-23T09:32:39+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 45.133.7.28 (NZ/137409) : 4h ban on Ip 45.133.7.28" module=db show less	Web App Attack
🇫🇷 Octopuce	2026-05-23 05:59:00 (1 month ago)	Aggressive web search of vulnerable pages: /wp-includes/Text/Diff/Engine/template-singl-portfolio.ph ... show more Aggressive web search of vulnerable pages: /wp-includes/Text/Diff/Engine/template-singl-portfolio.php /dropdown.php /wp-content/plugins/view-so ... show less	Web App Attack
🇬🇧 poundawebsiteltd	2026-05-23 05:42:22 (1 month ago)	Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 45.133.7.28 - - [23/May/2026:06:42:20 +0 ... show more Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 45.133.7.28 - - [23/May/2026:06:42:20 +0100] GET /wp-content/plugins/phpadmin/autoload_classmap.php HTTP/1.1 403 158 - Go-http-client/1.1 show less	Web App Attack

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 181.214.164.180

🇹🇭 165.154.120.253

🇺🇸 162.159.106.169

🇫🇷 158.220.125.127

🇺🇸 147.185.132.159

🇨🇳 120.48.175.122

🇺🇸 104.236.229.227

🇸🇬 47.128.96.120

🇸🇬 47.84.141.183

🇰🇷 182.225.134.13

🇮🇳 180.188.253.150

🇫🇮 178.20.210.208

🇩🇪 167.99.254.106

🇺🇸 153.66.28.132

🇸🇬 114.119.128.77

🇨🇳 106.58.173.254

🇺🇦 79.143.42.170

🇳🇱 45.148.10.151

🇨🇳 8.160.162.254

🇮🇳 198.38.85.149