JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.202.5

45.130.202.5 was found in our database!

This IP was reported 195 times. Confidence of Abuse is 14%: ?

14%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.202.5

Whois 45.130.202.5

IP Abuse Reports for 45.130.202.5:

This IP address has been reported a total of 195 times from 71 distinct sources. 45.130.202.5 was first reported on April 5th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 derekgallardo01	2026-07-30 17:16:23 (3 weeks ago)	Auto-reported by Worker: AiTM toolkit UA fingerprint CRITICAL: auto-add to BadIPS Named Location + r ... show more Auto-reported by Worker: AiTM toolkit UA fingerprint CRITICAL: auto-add to BadIPS Named Location + report to AbuseIPDB.. Detection: AiTM toolkit UA fingerprint (Tycoon/EvilProxy portal-browser). Blocked at Conditional Access gate. show less	Brute-Force Web App Attack
🇺🇸 derekgallardo01	2026-07-24 20:46:03 (4 weeks ago)	Auto-reported by Worker: AiTM toolkit UA fingerprint CRITICAL: auto-add to BadIPS Named Location + r ... show more Auto-reported by Worker: AiTM toolkit UA fingerprint CRITICAL: auto-add to BadIPS Named Location + report to AbuseIPDB.. Detection: AiTM toolkit UA fingerprint (Tycoon/EvilProxy portal-browser). Blocked at Conditional Access gate. show less	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-04 12:53:18 (1 month ago)	Blocked by CSF 13 firewall - Rule: XMLRPC NL/Netherlands/-	Web App Attack
Anonymous	2026-07-01 04:42:32 (1 month ago)	45.130.202.5 - - [01/Jul/2026:12:42:24 +0800] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP ... show more 45.130.202.5 - - [01/Jul/2026:12:42:24 +0800] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 196 "http://nowbaogumovies.com/wp-content/plugins/dummyyummy/wp-signup.php" "Go-http-client/1.1" 45.130.202.5 - - [01/Jul/2026:12:42:25 +0800] "GET /wp-content/plugins/core/core.php HTTP/1.1" 404 196 "http://nowbaogumovies.com/wp-content/plugins/core/core.php" "Go-http-client/1.1" 45.130.202.5 - - [01/Jul/2026:12:42:26 +0800] "GET /wp-content/plugins/schema/yanz.php HTTP/1.1" 404 196 "http://nowbaogumovies.com/wp-content/plugins/schema/yanz.php" "Go-http-client/1.1" 45.130.202.5 - - [01/Jul/2026:12:42:27 +0800] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 196 "http://nowbaogumovies.com/wp-content/plugins/pwnd-1/pwnd.php" "Go-http-client/1.1" 45.130.202.5 - - [01/Jul/2026:12:42:27 +0800] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 404 196 "http://nowbaogumovies.com/wp-content/plugins/init-help/init.php" "Go-http-client/1.1" 45.130.202.5 - - [01/Jul/2026:12:42 ... show less	Bad Web Bot Web App Attack
🇫🇷 AGEPCom	2026-07-01 01:06:50 (1 month ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
🇺🇸 TAY	2026-06-14 16:58:57 (2 months ago)	45.130.202.5 - - [15/Jun/2026:00:54:32 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "WordPress.co ... show more 45.130.202.5 - - [15/Jun/2026:00:54:32 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "WordPress.com; https://wordpress.com" 45.130.202.5 - - [15/Jun/2026:00:55:36 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "Jetpack by WordPress.com" 45.130.202.5 - - [15/Jun/2026:00:58:57 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "Jetpack/12.5; WordPress/6.1; http://site45104056.com" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-13 21:07:51 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:07:43.342185 2026] [security2:error] [pid 31816:tid 31856] [client 45.130.202.5:25267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nomadic-welshman.adetnw.com"] [uri "/.env.production"] [unique_id "ai3Gn5RZE5denwmHnykAZwAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 10:29:55 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:29:47.766993 2026] [security2:error] [pid 9712:tid 9712] [client 45.130.202.5:54919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ptr.dutchlake.com"] [uri "/.git/HEAD"] [unique_id "ai0xG9g_R_Gz1YZV22rbcgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 08:45:21 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:45:16.485562 2026] [security2:error] [pid 11767:tid 11767] [client 45.130.202.5:65147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.perissosdigitalmarketing.com.kevinfranz.com"] [uri "/.git/HEAD"] [unique_id "ai0YnKwY3TO0a9_jelfQsAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 07:41:25 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:41:20.095068 2026] [security2:error] [pid 27100:tid 27100] [client 45.130.202.5:58051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grayarea.us"] [uri "/wp-includes/wp-config.php"] [unique_id "ai0JoPdc302abXGVmU81XgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-06-12 18:20:27 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 09:12:22 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 05:12:18.696501 2026] [security2:error] [pid 32398:tid 32398] [client 45.130.202.5:35755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.studioyau.com"] [uri "/.git/HEAD"] [unique_id "aivNch_WBIRJjagFKN2_QwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 06:16:42 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 02:16:37.726525 2026] [security2:error] [pid 10301:tid 10301] [client 45.130.202.5:22691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ace.jmnr.net"] [uri "/.git/HEAD"] [unique_id "aiukRdsZCrEb7ZMsj93VEwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 YF	2026-06-12 05:00:29 (2 months ago)	Git HEAD exposure probe	Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 04:53:23 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 00:53:19.050517 2026] [security2:error] [pid 11303:tid 11303] [client 45.130.202.5:39903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.aticom.es"] [uri "/.env.production"] [unique_id "aiuQv-llxgX0OaKsFuxz5gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 195 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.233.182.39

🇵🇭 210.1.66.154

🇩🇪 194.88.98.123

🇺🇸 162.216.150.170

🇨🇳 121.227.31.13

🇨🇳 117.189.228.192

🇱🇺 64.89.160.73

🇰🇪 41.72.202.86

🇦🇷 190.107.123.111

🇦🇹 159.195.115.91

🇺🇸 152.32.207.197

🇺🇸 142.147.168.210

🇺🇸 135.237.125.27

🇮🇳 103.207.180.24

🇮🇳 103.77.14.62

🇻🇳 103.61.44.43

🇹🇷 95.128.58.227

🇳🇱 91.92.40.41

🇺🇸 89.116.14.102

🇺🇸 45.41.146.152