AbuseIPDB » 45.130.202.46

45.130.202.46 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 11%: ?

11%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	legaconetworks.nl
Country	Turkey
City	Ankara, Ankara

Report 45.130.202.46

Whois 45.130.202.46

IP Abuse Reports for 45.130.202.46:

This IP address has been reported a total of 32 times from 16 distinct sources. 45.130.202.46 was first reported on November 23rd 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-11-19 12:57:58 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
TPI-Abuse	2024-11-14 19:36:13 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 14 14:36:06.360497 2024] [security2:error] [pid 6994:tid 6994] [client 45.130.202.46:42911] [client 45.130.202.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crypto-stamps.com"] [uri "/bak/sftp-config.json"] [unique_id "ZzZRJkkTzVek0YR8wZaDcwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-11 08:24:20 (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 03:24:14.365276 2024] [security2:error] [pid 29820:tid 29820] [client 45.130.202.46:57163] [client 45.130.202.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcointoolshop.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcointoolshop.com"] [uri "/backup/sql.sql"] [unique_id "ZzG_LsJePx-bGDFoj0etDwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-10-29 23:53:43 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 29 19:53:38.554647 2024] [security2:error] [pid 12950:tid 12953] [client 45.130.202.46:13817] [client 45.130.202.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magazineofwallstreet.com"] [uri "/back/sftp-config.json"] [unique_id "ZyF1gkm7kRG4PM0JU2XZnQAAAQA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-10-25 00:27:44 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 24 20:27:36.954522 2024] [security2:error] [pid 24910:tid 24910] [client 45.130.202.46:21833] [client 45.130.202.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ciptaconindotara.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ciptaconindotara.com"] [uri "/sql.sql"] [unique_id "Zxrl-E9GFpuECcN3KIbItgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-09-12 03:05:57 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 11 23:05:54.002889 2024] [security2:error] [pid 15620:tid 15620] [client 45.130.202.46:52197] [client 45.130.202.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cryptoedge.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cryptoedge.net"] [uri "/backup/mysql.sql"] [unique_id "ZuJakhNzxUs-fyXH1F9bRgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-22 04:12:17 (3 months ago)	Account archive download attempts	Hacking Brute-Force
TPI-Abuse	2024-08-09 06:20:45 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 09 02:20:30.499451 2024] [security2:error] [pid 26659:tid 26749] [client 45.130.202.46:18805] [client 45.130.202.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bluetigertees.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bluetigertees.com"] [uri "/restore/www.sql"] [unique_id "ZrW1LrM7eAzbIHb6Y_nZIQAAAxg"] show less	Brute-Force Bad Web Bot Web App Attack
hbrks	2024-08-07 16:45:33 (4 months ago)	HEAD http://marche-be.com/old/bak.gz	Web Spam Hacking Bad Web Bot
Anonymous	2024-07-06 07:49:48 (5 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
TPI-Abuse	2024-06-19 18:24:11 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 19 14:24:06.046909 2024] [security2:error] [pid 4331] [client 45.130.202.46:40503] [client 45.130.202.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|csgohub.gg\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "csgohub.gg"] [uri "/mysql.sql"] [unique_id "ZnMiRrG_ghl5_qtBaOGOEQAAAAA"] show less	Brute-Force Brute-Force Bad Web Bot Bad Web Bot Web App Attack Web App Attack
TPI-Abuse	2024-06-14 13:30:25 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210730) triggered by 45.130.202.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 14 09:30:20.808887 2024] [security2:error] [pid 27185] [client 45.130.202.46:61215] [client 45.130.202.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|swhowell.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "swhowell.com"] [uri "/restore/wallet.dat"] [unique_id "ZmxF7FLO3QGV7aaAuNif0QAAAA8"] show less	Brute-Force Brute-Force Bad Web Bot Bad Web Bot Web App Attack Web App Attack
hbrks	2024-06-11 10:26:12 (5 months ago)	HEAD http://p4u.xyz/backup/backup.tar	Web Spam Hacking Bad Web Bot
unifr	2024-06-11 03:46:09 (5 months ago)	Unauthorized IMAP connection attempt	Brute-Force
oncord	2024-06-06 15:50:28 (6 months ago)	Form spam	Web Spam