JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.202.42

45.130.202.42 was found in our database!

This IP was reported 189 times. Confidence of Abuse is 71%: ?

71%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.202.42

Whois 45.130.202.42

IP Abuse Reports for 45.130.202.42:

This IP address has been reported a total of 189 times from 64 distinct sources. 45.130.202.42 was first reported on January 12th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TAY	2026-06-14 16:56:39 (1 week ago)	45.130.202.42 - - [15/Jun/2026:00:46:46 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "Jetpack by ... show more 45.130.202.42 - - [15/Jun/2026:00:46:46 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" 45.130.202.42 - - [15/Jun/2026:00:51:11 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "Jetpack by WordPress.com" 45.130.202.42 - - [15/Jun/2026:00:56:39 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" ... show less	Brute-Force
🇺🇸 integrantservices.com	2026-06-14 16:06:06 (1 week ago)	(wordpress) Failed wordpress login from 45.130.202.42 (TR/Türkiye/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-13 10:42:17 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:42:10.317431 2026] [security2:error] [pid 29400:tid 29400] [client 45.130.202.42:32067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internationalconnect.herecometheplanes.com"] [uri "/.git/HEAD"] [unique_id "ai00Alsk7t8c_ciT_e1tpAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 06:36:31 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:36:25.056700 2026] [security2:error] [pid 12873:tid 12873] [client 45.130.202.42:64045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cdtstorage.gocdt.com"] [uri "/.git/HEAD"] [unique_id "aiz6aUfAUSVZcwFvzydabgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 05:55:08 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:54:59.515986 2026] [security2:error] [pid 7272:tid 7272] [client 45.130.202.42:31735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.68sportsuniforms.liddlesports.com"] [uri "/.git/HEAD"] [unique_id "aizws4CDA9oiJX4A0yliIwAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇬 pa4080	2026-06-12 21:57:36 (1 week ago)	Detected by ModSecurity. Request URI: /.env.production	Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 18:49:27 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:49:23.346181 2026] [security2:error] [pid 363:tid 363] [client 45.130.202.42:62537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawaiivacations.com.kh6jim.com"] [uri "/.env.production"] [unique_id "aixUszZUFDKcQPGhPlXkogAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-12 14:30:32 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 YF	2026-06-12 05:00:25 (1 week ago)	Git HEAD exposure probe	Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 04:52:43 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 00:52:35.013463 2026] [security2:error] [pid 1939:tid 1939] [client 45.130.202.42:20435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.aticom.es"] [uri "/.env.production"] [unique_id "aiuQk8Dcbu1qJqG1tIHNuQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 22:34:54 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 18:34:47.602757 2026] [security2:error] [pid 5728:tid 5728] [client 45.130.202.42:38885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zanussi.pamplonaserviciotecnico.com"] [uri "/.git/HEAD"] [unique_id "ais4B9y3Oi98OpP5uG4ymQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Halux	2026-06-11 16:36:58 (1 week ago)	45.130.202.42 Probing protected path or service	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-10 21:59:04 (1 week ago)	Auto-ban: >3000 req/min op 2026-06-10	Web App Attack SSH Hacking
🇫🇷 dynamix	2026-06-10 13:30:27 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇺🇸 mnsf	2026-06-10 05:05:25 (2 weeks ago)	Abuse Detected (1)	Brute-Force Web App Attack

Showing 1 to 15 of 189 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.218.206.85

🇩🇪 213.209.159.228

🇨🇳 220.243.133.81

🇹🇭 203.154.158.195

🇺🇸 144.91.225.186

🇵🇱 89.67.37.52

🇺🇸 74.142.22.250

🇮🇳 182.95.224.62

🇺🇸 179.61.232.244

🇻🇳 115.78.9.138

🇽🇰 82.114.75.113

🇺🇸 57.141.14.95

🇳🇱 45.148.10.141

🇺🇸 35.253.93.32

🇻🇳 180.93.0.112

🇳🇱 107.150.22.7

🇺🇸 96.78.175.36

🇱🇻 81.30.98.62

🇺🇸 64.62.156.52

🇬🇧 2a06:4880:c000::df