JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.130.202.53

Neutral Activity

Abuse Confidence Score

0% Low Risk

199 reports

81 reporters · latest 5 months ago

ISP: Legaco Networks B.V.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS137409
Domain Name: legaconetworks.nl
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.130.202.53 has been reported 199 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

199 from 81 distinct reporters

First reported

November 26th 2022

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-14 09:53:08 UTC · (5 months ago)	45.130.202.53 - - [14/Jun/2026:11:52:42 +0200] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.130.202.53 - - [14/Jun ... show more 45.130.202.53 - - [14/Jun/2026:11:52:42 +0200] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.130.202.53 - - [14/Jun/2026:11:52:42 +0200] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.130.202.53 - - [14/Jun/2026:11:52:43 +0200] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.130.202.53 - - [14/Jun/2026:11:52:43 +0200] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.130.202.53 - - [14/Jun/2026:11:52:43 +0200] "GET /wp-admin/css/chosen.php HTTP/1 ... show less	DDoS Attack
🇺🇸 TPI-Abuse	2026-06-12 18:49:51 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.53 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:49:47.115003 2026] [security2:error] [pid 19485:tid 19485] [client 45.130.202.53:52769] M ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.53 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:49:47.115003 2026] [security2:error] [pid 19485:tid 19485] [client 45.130.202.53:52769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kavahawaii.com.kh6jim.com"] [uri "/.env.production"] [unique_id "aixUy4bBHK60WUixWW-PFQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-12 13:06:25 UTC · (5 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 08:30:38 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.53 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 04:30:32.188919 2026] [security2:error] [pid 18975:tid 18975] [client 45.130.202.53:22297] M ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.53 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 04:30:32.188919 2026] [security2:error] [pid 18975:tid 18975] [client 45.130.202.53:22297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.societasprivata.sfsdesignsproductions.com"] [uri "/.git/HEAD"] [unique_id "aivDqBXq5aMTIJWJo6WsNQAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 07:28:00 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.53 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 03:27:56.091064 2026] [security2:error] [pid 26192:tid 26220] [client 45.130.202.53:51663] M ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.53 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 03:27:56.091064 2026] [security2:error] [pid 26192:tid 26220] [client 45.130.202.53:51663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.louisgfazzi.jd-web-designs.com"] [uri "/.git/HEAD"] [unique_id "aiu0_M5e0XVjk_YicGdDtgAAARc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 YF	2026-06-12 05:00:31 UTC · (5 months ago)	Git HEAD exposure probe	Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 04:54:33 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.202.53 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 00:54:29.655641 2026] [security2:error] [pid 9833:tid 9833] [client 45.130.202.53:49249] Mod ... show more (mod_security) mod_security (id:210492) triggered by 45.130.202.53 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 00:54:29.655641 2026] [security2:error] [pid 9833:tid 9833] [client 45.130.202.53:49249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rotentendales.aticom.es"] [uri "/.env.production"] [unique_id "aiuRBas2k3Ny7mjgjer35AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 AvonleaConsulting	2026-06-11 04:21:07 UTC · (5 months ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇬🇧 Apache	2026-06-10 19:58:02 UTC · (5 months ago)	(mod_security) mod_security (id:20000010) triggered by 45.130.202.53 (TR/Türkiye/-): 5 in the last 300 secs	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 08:16:31 UTC · (5 months ago)	(mod_security) mod_security (id:240000) triggered by 45.130.202.53 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 04:16:26.007564 2026] [security2:error] [pid 24771:tid 24771] [client 45.130.202.53:30941] M ... show more (mod_security) mod_security (id:240000) triggered by 45.130.202.53 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 04:16:26.007564 2026] [security2:error] [pid 24771:tid 24771] [client 45.130.202.53:30941] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|nhgrange.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "nhgrange.org"] [uri "/images/stories/themes.php"] [unique_id "aikdWqicC-Y7SfVCO0mDgwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-05 06:15:01 UTC · (5 months ago)	Excessive multi-domain requests	Brute-Force
🇦🇺 aranguren.org	2026-06-03 14:55:32 UTC · (5 months ago)	45.130.202.53 - - [04/Jun/2026:00:55:29 +1000] "GET /wp-includes/class.api.php HTTP/1.1" 404 990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.130.202.53 - - [04/Jun/2026:0 ... show more 45.130.202.53 - - [04/Jun/2026:00:55:29 +1000] "GET /wp-includes/class.api.php HTTP/1.1" 404 990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.130.202.53 - - [04/Jun/2026:00:55:29 +1000] "GET /wp-includes/fonts/index.php HTTP/1.1" 404 990 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.130.202.53 - - [04/Jun/2026:00:55:30 +1000] "GET /wp-admin/chosen.php HTTP/1.1" 404 990 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.130.202.53 - - [04/Jun/2026:00:55:30 +1000] "GET /autoload_classmap/bypass.php HTTP/1.1" 404 990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.130.202.53 - - [04/Jun/2026:00:55:31 +1000] "GET /dropdown.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Bad Web Bot
🇳🇱 Site.eu	2026-06-03 13:13:29 UTC · (5 months ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-06-03 06:07:28 UTC · (5 months ago)	IP banned by Fail2Ban due to multiple malicious requests on Nginx	Brute-Force SSH Web App Attack
🇩🇪 Ba-Yu	2026-06-03 05:44:29 UTC · (5 months ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 199 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 167.253.19.170

🇨🇮 160.155.197.138

🇺🇸 89.222.92.0

🇬🇧 89.37.172.154

🇩🇪 69.5.169.20

🇺🇦 176.122.119.209

🇺🇸 162.216.150.33

🇭🇰 154.92.2.59

🇺🇸 147.78.182.120

🇮🇷 85.198.19.242

🇬🇧 35.203.211.25

🇺🇸 20.3.253.156

🇺🇸 2600:1901:0:6658::

🇨🇳 180.153.236.14

🇨🇦 172.105.109.85

🇨🇳 121.227.31.13

🇪🇸 85.86.210.52

🇺🇸 54.176.62.34

🇮🇪 34.251.114.139

🇷🇺 217.150.37.249