JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.130.202.11

Neutral Activity

Abuse Confidence Score

0% Low Risk

183 reports

72 reporters · latest 3 months ago

ISP: Legaco Networks B.V.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS137409
Domain Name: legaconetworks.nl
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.130.202.11 has been reported 183 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

183 from 72 distinct reporters

First reported

February 19th 2023

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 derekgallardo01	2026-08-05 06:01:24 UTC · (3 months ago)	Auto-reported by Worker: AiTM toolkit UA fingerprint CRITICAL: auto-add to BadIPS Named Location + report to AbuseIPDB.. Detection: AiTM toolkit UA fingerprint (Tycoon/EvilProxy portal-browser). Blocked at Conditional Access gate.	Brute-Force Web App Attack
🇺🇸 derekgallardo01	2026-07-30 17:16:27 UTC · (3 months ago)	Auto-reported by Worker: AiTM toolkit UA fingerprint CRITICAL: auto-add to BadIPS Named Location + report to AbuseIPDB.. Detection: AiTM toolkit UA fingerprint (Tycoon/EvilProxy portal-browser). Blocked at Conditional Access gate.	Brute-Force Web App Attack
🇮🇩 sockominfo	2026-07-29 22:00:28 UTC · (3 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇫🇷 Octopuce	2026-07-01 08:23:03 UTC · (4 months ago)	Aggressive web search of vulnerable pages: /wp-content/themes/bltm/wp-login.php /wp-content/themes/twentytwentythree/patterns/ /wp-content/plug ...	Web App Attack
🇬🇧 CrystalMaker	2026-07-01 06:02:58 UTC · (4 months ago)	Wordpress attack - GET /wp-includes/woocommerce-call.php HTTP/2.0; GET /wp-content/plugins/wordpress-seo/wp-seo-main-float.php HTTP/2.0; GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/2.0; GET /wp-content/themes/news-portal/er ... show more Wordpress attack - GET /wp-includes/woocommerce-call.php HTTP/2.0; GET /wp-content/plugins/wordpress-seo/wp-seo-main-float.php HTTP/2.0; GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/2.0; GET /wp-content/themes/news-portal/error.php HTTP/2.0; GET /wp-content/themes/fukasawa/inc/classes/403.php HTTP/2.0; GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/2.0; GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/2.0; GET /wp-content/plugins/filester/assets/css/404.php HTTP/2.0; GET /wp-content/themes/neve/assets/apps/dashboard/build/index.php HTTP/2.0; GET /wp-content/themes/theme-check/main.php HTTP/2.0; GET /wp-content/plugins/elementor/includes/interfaces/about.php HTTP/2.0; GET /wp-content/plugins/wp-cache-sys/index.php HTTP/2.0; GET /wp-content/plugins/aatdgetgdg/main.php HTTP/2.0; GET /wp-content/plugins/pwnd/pwnd.php HTTP/2.0; GET /wp-content/plugins/StylePlugin/up.php HTTP/2.0; GET /wp-content/plugins/semrush/x.php HTTP/2.0; GET /wp-content/plugins/fix/u... show less	Web App Attack
Anonymous	2026-06-14 09:52:40 UTC · (5 months ago)	45.130.202.11 - - [14/Jun/2026:11:50:03 +0200] "GET /wp-content/uploads/wp.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.130.202.11 - - [14/Jun/2026:11 ... show more 45.130.202.11 - - [14/Jun/2026:11:50:03 +0200] "GET /wp-content/uploads/wp.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.130.202.11 - - [14/Jun/2026:11:50:04 +0200] "GET /wp-includes/certificates/about.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.130.202.11 - - [14/Jun/2026:11:50:04 +0200] "GET /cgi-bin/class.api.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.130.202.11 - - [14/Jun/2026:11:50:04 +0200] "GET /wp-content/cache/index.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.130.202.11 - - [14/Jun/2026:11:50:04 +0200] "GET /wp-admin/css/colors/blue/file.php ... show less	DDoS Attack
🇺🇸 TPI-Abuse	2026-06-13 10:42:18 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.11 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:42:10.364046 2026] [security2:error] [pid 30548:tid 30548] [client 45.130.202.11:50929] M ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.11 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:42:10.364046 2026] [security2:error] [pid 30548:tid 30548] [client 45.130.202.11:50929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegreatleapforward.com.herecometheplanes.com"] [uri "/.git/HEAD"] [unique_id "ai00ArZww4cUp5ux5aIKEgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 09:23:58 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.11 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:23:50.220469 2026] [security2:error] [pid 10481:tid 10481] [client 45.130.202.11:38289] M ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.11 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:23:50.220469 2026] [security2:error] [pid 10481:tid 10481] [client 45.130.202.11:38289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.diydivalv.andiamocomputers.com"] [uri "/.git/HEAD"] [unique_id "ai0hpuB3FRbXUQ_Za8rHpQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 08:07:21 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.11 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:07:15.669834 2026] [security2:error] [pid 20691:tid 20691] [client 45.130.202.11:40549] M ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.11 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:07:15.669834 2026] [security2:error] [pid 20691:tid 20691] [client 45.130.202.11:40549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.denroydannursery.edgeimprov.com"] [uri "/.git/HEAD"] [unique_id "ai0Ps9JSw9CLS-isjPmy2AAAAFo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 06:40:14 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.11 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:40:06.862781 2026] [security2:error] [pid 27748:tid 27748] [client 45.130.202.11:48491] M ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.11 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:40:06.862781 2026] [security2:error] [pid 27748:tid 27748] [client 45.130.202.11:48491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zemincollection.chevronparkett.com"] [uri "/.git/HEAD"] [unique_id "aiz7RjWo4PDKhbPKb7-9MQAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-12 23:29:26 UTC · (5 months ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-12 18:51:47 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.11 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:51:42.384167 2026] [security2:error] [pid 1057:tid 1057] [client 45.130.202.11:36227] Mod ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.11 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:51:42.384167 2026] [security2:error] [pid 1057:tid 1057] [client 45.130.202.11:36227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bigislandhawaiirealty.com.kh6jim.com"] [uri "/.env"] [unique_id "aixVPgaOFikyTOvmE-bAzgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-12 13:08:44 UTC · (5 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Octopuce	2026-06-12 10:21:03 UTC · (5 months ago)	Aggressive web search of vulnerable pages: /wp-login.php /wp-admin/maint/bootstrap.php /themes/zMousse/otuz1.php /wp-content/edit-wolf.php /wp- ...	Web App Attack
🇫🇷 dynamix	2026-06-12 09:44:01 UTC · (5 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 183 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 221.228.203.3

🇪🇹 213.55.79.195

🇦🇷 190.105.160.5

🇺🇦 178.158.217.236

🇻🇪 38.159.60.76

🇺🇸 20.150.195.25

🇺🇸 216.180.246.66

🇰🇷 203.142.160.143

🇳🇱 195.178.110.242

🇺🇸 162.216.149.40

🇴🇲 96.9.139.175

🇺🇸 66.132.195.30

🇺🇸 216.244.66.197

🇲🇽 187.223.213.84

🇦🇺 167.179.148.15

🇳🇱 77.239.124.149

🇬🇧 45.133.173.75

🇹🇼 198.235.24.115

🇱🇧 185.243.210.149

🇰🇷 180.70.154.248