JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.7.53

45.133.7.53 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 52%: ?

52%

ISP	VPN-Consumer-NZ
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇳🇿 New Zealand
City	Auckland, Auckland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.7.53

Whois 45.133.7.53

IP Abuse Reports for 45.133.7.53:

This IP address has been reported a total of 102 times from 45 distinct sources. 45.133.7.53 was first reported on July 17th 2021, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 rwgomes	2026-07-24 16:08:25 (15 hours ago)	Automated report from Intelligence Finance Tools. IP probed malicious path: /vendor/phpunit/phpunit/ ... show more Automated report from Intelligence Finance Tools. IP probed malicious path: /vendor/phpunit/phpunit/src/Util/PHP/. No such resource exists on this server. show less	Web App Attack Hacking
🇬🇧 consul.to	2026-07-24 05:37:24 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Octopuce	2026-07-24 02:26:15 (1 day ago)	Aggressive web search of vulnerable pages: /wp-content/file.php /wp-includes/Text/Diff/Engine/about. ... show more Aggressive web search of vulnerable pages: /wp-content/file.php /wp-includes/Text/Diff/Engine/about.php /fm.php /wp-admin/js/widgets/cloud.php ... show less	Web App Attack
🇬🇧 consul.to	2026-07-20 09:21:01 (4 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-07-19 14:03:18 (5 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 21:57:03 (6 days ago)	(mod_security) mod_security (id:240000) triggered by 45.133.7.53 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.7.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 17:56:56.450374 2026] [security2:error] [pid 4671:tid 4671] [client 45.133.7.53:63103] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|aurumprivatecapital.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "aurumprivatecapital.com"] [uri "/images/stories/themes.php"] [unique_id "alv2qAzqT_-2uCIABpw-ngAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-18 00:24:21 (1 week ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-07-17 18:02:56 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 05:41:11 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 45.133.7.53 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 45.133.7.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:41:06.441142 2026] [security2:error] [pid 385370:tid 385486] [client 45.133.7.53:42021] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|iheb.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "iheb.org"] [uri "/images/stories/themes.php"] [unique_id "alnAcidrjqGzfOTOjLEQrwAAAkA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-16 13:09:23 (1 week ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2026-07-14 23:11:41 (1 week ago)	Multiple WAF Violations	Web App Attack
🇺🇸 ipblock.com	2026-07-13 12:48:00 (1 week ago)	IPBlock protected site ID [4055-d][s=01]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-13 08:39:49 (1 week ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 DrLex0	2026-07-13 01:12:47 (1 week ago)	Distributed attack poking for WordPress stuff from multiple IPs in shitty 45.133.7.0/24 VPN consumer ... show more Distributed attack poking for WordPress stuff from multiple IPs in shitty 45.133.7.0/24 VPN consumer crap range 45.133.7.53 80 - [13/Jul/2026:01:11:32 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.7.53 80 - [13/Jul/2026:01:12:46 +0000] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.7.53 80 - [13/Jul/2026:01:12:47 +0000] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" show less	DDoS Attack Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-11 22:17:42 (1 week ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 221.120.57.125

🇧🇷 191.6.25.239

🇨🇳 180.108.64.164

🇮🇳 119.18.52.5

🇪🇸 79.156.166.50

🇱🇹 77.90.185.5

🇳🇱 45.148.10.152

🇳🇱 45.148.10.147

🇬🇧 35.203.211.44

🇳🇱 34.187.8.153

🇭🇰 8.217.108.67

🇩🇪 8.211.38.67

🇭🇰 199.45.155.65

🇺🇸 162.216.149.213

🇭🇰 156.225.1.106

🇭🇰 156.225.1.90

🇫🇮 141.98.86.147

🇺🇸 138.68.243.18

🇵🇰 111.92.137.186

🇮🇳 106.192.244.130