JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.130.202.216

Activity Trending Down

Abuse Confidence Score

67% Elevated

77 reports

32 reporters · latest 1 week ago

ISP: Legaco Networks B.V.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS137409
Domain Name: legaconetworks.nl
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

77 from 32 distinct reporters

First reported

April 2nd 2024

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 8 🇺🇸 United States of America 5 🇳🇱 Netherlands 4

Most common categories Web App Attack 17 Brute-Force 6 Bad Web Bot 6 Hacking 4 SSH 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 todix	2026-11-06 04:55:20 UTC · (1 week ago)	"GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10"	Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 03:49:26 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:49:21.754625 2026] [security2:error] [pid 25230:tid 25230] [client 45.130.202.216:34503] ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:49:21.754625 2026] [security2:error] [pid 25230:tid 25230] [client 45.130.202.216:34503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.comics4.sale.ampro.link"] [uri "/.git/HEAD"] [unique_id "au1OQaoNOYoezk10jguCtwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 00:30:41 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:30:35.894521 2026] [security2:error] [pid 6739:tid 6739] [client 45.130.202.216:23213] M ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:30:35.894521 2026] [security2:error] [pid 6739:tid 6739] [client 45.130.202.216:23213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barriebrown.com.thephysicsroom.com"] [uri "/.git/HEAD"] [unique_id "au0fq8O15TTytBW15ObakQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-11-05 23:39:13 UTC · (1 week ago)	Activity from blacklisted IP	Hacking
🇳🇱 homeshowdomain.nl	2026-11-05 22:59:24 UTC · (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.	Web App Attack SSH Hacking
🇩🇪 pltcldvlpr	2026-11-05 05:10:02 UTC · (1 week ago)	CMS/framework probe: 45.130.202.216 - - [05/Nov/2026:06:10:01 +0100] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Python-urllib/3.10" asn=137409 org="GSL Networks Pty LTD" country=TR ...	Web App Attack
🇫🇷 service Informatique	2026-11-05 04:00:37 UTC · (1 week ago)	GET /backup	Web App Attack
🇺🇸 CBJ	2026-11-05 00:39:16 UTC · (1 week ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇸 TPI-Abuse	2026-11-04 23:42:09 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:41:59.961913 2026] [security2:error] [pid 16859:tid 16859] [client 45.130.202.216:63343] ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.216 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:41:59.961913 2026] [security2:error] [pid 16859:tid 16859] [client 45.130.202.216:63343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "njletr.bknj2.org"] [uri "/.git/HEAD"] [unique_id "auvCxxcc-_SnF6h11CTMsQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-11-04 22:59:41 UTC · (1 week ago)	Auto-ban: >3000 req/min op 2026-11-04	Web App Attack SSH Hacking
🇧🇷 ICS Labs	2026-11-04 14:37:50 UTC · (1 week ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-04 UTC.	Brute-Force
🇫🇷 security.rdmc.fr	2026-11-04 06:37:55 UTC · (1 week ago)	Activity from blacklisted IP	Hacking
🇩🇪 ghostwarriors	2026-11-04 02:50:33 UTC · (1 week ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 throny	2026-11-04 02:35:06 UTC · (1 week ago)	Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...). Requests within an hour: 4 on 4 host(s) User agent: - \| Python-urllib/3.10 Requested, e.g.: - mysql.[REDACTED]/.git/HEAD - traefik.[REDACTED]/.gi ... show more Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...). Requests within an hour: 4 on 4 host(s) User agent: - \| Python-urllib/3.10 Requested, e.g.: - mysql.[REDACTED]/.git/HEAD - traefik.[REDACTED]/.git/HEAD show less	Web App Attack
🇺🇸 Charlesiv	2026-11-04 01:11:12 UTC · (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 137409 (GSL Networks Pty LTD) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/HEAD Timestamp: 2026-11-04T00:30:04Z Ray ID: a54f820bbfa31db0 UA: Python-urllib/3.10	Bad Web Bot

Showing 1 to 15 of 77 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 198.235.24.233

🇧🇪 198.235.24.224

🇧🇷 191.210.133.134

🇬🇧 154.16.44.158

🇦🇷 152.168.55.55

🇺🇸 93.152.84.52

🇺🇸 17.166.232.192

🇨🇴 2.152.13.20

🇻🇪 200.8.236.4

🇧🇪 198.235.24.206

🇧🇪 198.235.24.205

🇧🇪 198.235.24.203

🇹🇼 198.235.24.110

🇧🇷 187.51.84.86

🇳🇱 172.71.182.2

🇳🇱 172.70.46.153

🇳🇱 86.38.187.33

🇩🇪 82.165.187.164

🇳🇱 204.76.203.40

🇧🇪 198.235.24.201