45.130.202.119

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
97% Critical
35 reports
30 reporters · latest 4 days ago
ISP
Legaco Networks B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS137409
Domain Name
legaconetworks.nl
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
35 from 30 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇬🇧 United Kingdom of Great Britain and Northern Ireland 5 🇺🇸 United States of America 5 🇩🇪 Germany 4
Most common categories Web App Attack 19 Bad Web Bot 11 Brute-Force 7 Hacking 6 Exploited Host 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [mx01,mx02,wa01,wa02]
Brute-Force Bad Web Bot Exploited Host Web App Attack
🇺🇸 jcbriar
Searching for vulnerable scripts
Hacking Web App Attack
🇬🇧 andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
🇺🇸 etu brutus
45.130.202.119 Blocked by [Attack Vector List] ...
Hacking Brute-Force Exploited Host
🇳🇱 Alt255
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.130.202.119 - - [06/Nov/2026:01:21:37 +0100] "GET /.git/HEAD HTTP/1.1" 403 7929 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.
Web App Attack SSH Hacking
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇫🇷 uthul
T-Pot honeypot: 9 hits on ports [443] (automated)
Port Scan Web App Attack
🇬🇧 www.elivecd.org
Web Spam Email Spam
🇮🇹 sentinel1
Sentinel: [Credential scan] status=301 [GET] talos.nexus-orbital.com/.git/HEAD -> 301
Web App Attack
🇺🇸 CBJ
fail2ban: apache-filepath-recon ...
Web App Attack
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-04 UTC.
Brute-Force
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors
Attempts against non-existent wp-login
Brute-Force Web App Attack
🇩🇪 throny
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...). Requests within an hour: 3 on 3 host(s) User agent: - | Python-urllib/3.10 Requested, e.g.: - support.[REDACTED]/.git/HEAD
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇳 197.5.145.150
🇸🇬 94.231.206.9
🇬🇧 80.85.84.75
🇺🇸 209.209.59.8
🇧🇷 164.163.179.37
🇳🇱 77.67.26.31
🇺🇸 192.253.209.111
🇵🇱 172.69.155.229
🇻🇪 156.231.238.69
🇰🇷 121.133.167.123
🇰🇷 119.204.122.94
🇻🇳 118.70.182.193
🇫🇷 91.231.89.59
🇸🇬 84.75.148.82
🇰🇷 59.29.81.26
🇹🇭 47.81.59.121
🇺🇸 3.84.27.133
🇨🇴 190.253.109.104
🇵🇱 172.69.155.27
🇫🇷 104.28.30.26
feedback