45.130.202.178

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
75% Critical
25 reports
23 reporters · latest 1 week ago
ISP
Legaco Networks B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS137409
Domain Name
legaconetworks.nl
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 23 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇧🇷 Brazil 3 🇳🇱 Netherlands 3
Most common categories Web App Attack 13 Bad Web Bot 8 Hacking 4 Brute-Force 4 SSH 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
Web App Attack Bad Web Bot
🇪🇸 librebit
Brute force
Brute-Force
🇩🇪 Michel Wijnberg
45.130.202.178 - - [06/Nov/2026:03:04:57 +0000] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack
🇳🇱 Alt255
[cb-16al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.130.202.178 - - [06/Nov/2026:00:55:23 +0100] "GET /.git/HEAD HTTP/1.1" 403 146 "-" "Python-urllib/3.10" ...
Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.
Web App Attack SSH Hacking
Anonymous
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
Web App Attack Bad Web Bot
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
Anonymous
Hacking Attempt
Hacking Web App Attack
🇺🇸 Starburst SysOp Team
Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-1)
Hacking Bad Web Bot
🇺🇸 CBJ
fail2ban: apache-filepath-recon ...
Web App Attack
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-04 UTC.
Brute-Force
🇩🇪 ghostwarriors
Attempts against non-existent wp-login
Brute-Force Web App Attack
🇩🇪 throny
Web App Attack
🇺🇦 URAN Publishing Service
[04/Nov/2026:04:15:27 +0200] -- 45.130.202.178 Ban reason: User-Agent Python-urllib
Bad Web Bot Web App Attack
Anonymous
Blocked: Reason='Vulnerability probing — PHP scan detected (11/60 min)'; Requests=11
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 182.8.99.133
🇨🇳 180.168.24.186
🇻🇳 103.98.152.181
🇳🇱 64.205.72.90
🇪🇹 196.190.240.80
🇩🇪 161.35.215.171
🇨🇳 116.179.32.169
🇺🇸 100.24.13.85
🇫🇷 91.231.89.55
🇫🇷 91.196.152.102
🇹🇷 78.135.111.47
🇺🇸 74.235.85.9
🇳🇱 64.205.72.86
🇬🇧 45.133.173.234
🇵🇱 162.158.102.125
🇮🇩 112.78.154.240
🇳🇱 64.205.72.79
🇳🇱 64.205.72.8
🇧🇩 210.4.68.72
feedback