JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.130.203.128

Neutral Activity

Abuse confidence score ?

0% Low Risk

409 reports

124 reporters · latest 2 months ago

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.130.203.128 has been reported 409 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 45.130.203.128

Export CSV

This IP address has been reported a total of 409 times from 124 distinct sources. 45.130.203.128 was first reported on January 19th 2024, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-07-29 14:19:38 (2 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-28 14:19:38 (2 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇳🇱 e.fierstra	2026-07-28 12:54:50 (2 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 00:46:23 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 20:46:09.254193 2026] [security2:error] [pid 1663756:tid 1663756] [client 45.130.203.128:57939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.csmedicalbilling.com"] [uri "/.env"] [unique_id "amFkUT1WP7ZPMno3uKhUpgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-07-14 23:01:13 (2 months ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 07:50:00 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 03:49:53.365467 2026] [security2:error] [pid 4682:tid 4682] [client 45.130.203.128:58557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.stormstrips.com"] [uri "/.git/HEAD"] [unique_id "alSYoT3pnyGcNvEKtc8qzAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 05:02:28 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 01:02:24.279214 2026] [security2:error] [pid 12380:tid 12380] [client 45.130.203.128:38707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kristip.baird.net"] [uri "/.git/HEAD"] [unique_id "alRxYBhjL59aoaF1qVO8cgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-12 16:13:45 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 12:13:38.409554 2026] [security2:error] [pid 31167:tid 31167] [client 45.130.203.128:27443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.efhgtc.org"] [uri "/.git/HEAD"] [unique_id "alO9MuA4l9oFm8OUhRgpxgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-12 02:46:48 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 22:46:40.365777 2026] [security2:error] [pid 1160828:tid 1160828] [client 45.130.203.128:28023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.koidivision.com"] [uri "/.git/HEAD"] [unique_id "alMAEKec0OL9DBwc-OvUWgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 10:21:53 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 06:21:47.911685 2026] [security2:error] [pid 17183:tid 17205] [client 45.130.203.128:42879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.adventistdeathconfusion.com.mylordsday.com"] [uri "/.git/HEAD"] [unique_id "ak92O6TUykmYJMFy8QnIqAAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 05:38:39 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 01:38:32.191807 2026] [security2:error] [pid 29544:tid 29544] [client 45.130.203.128:29681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photography.thenewplace.org"] [uri "/.git/HEAD"] [unique_id "ak8z2BJKPuIRxpUjh7F1qAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 02:09:56 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 22:09:52.498942 2026] [security2:error] [pid 6608:tid 6608] [client 45.130.203.128:50783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "d2.stoneast.com"] [uri "/.git/HEAD"] [unique_id "ak8C8K74o5yaj_yArvIhsgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 abenage	2026-07-03 11:53:04 (3 months ago)	45.130.203.128 - - [03/Jul/2026:05:53:01 -0600] "GET /bkp/ HTTP/1.1" 404 162 "-" "Jobmaster-Opendir/ ... show more 45.130.203.128 - - [03/Jul/2026:05:53:01 -0600] "GET /bkp/ HTTP/1.1" 404 162 "-" "Jobmaster-Opendir/1.0" show less	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-03 11:20:17 (3 months ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇫🇷 masterguru	2026-07-03 08:13:54 (3 months ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193) show less	Hacking

Showing 1 to 15 of 409 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.227

🇧🇷 172.71.234.190

🇺🇸 162.158.186.139

🇩🇪 161.35.77.171

🇹🇭 150.95.25.34

🇧🇪 104.155.17.130

🇹🇷 94.183.249.92

🇨🇦 85.217.149.69

🇺🇸 48.216.242.214

🇭🇰 47.242.22.192

🇺🇸 23.92.26.123

🇺🇸 8.235.81.210

🇬🇧 2.57.17.49

🇰🇷 222.232.176.7

🇧🇪 207.175.191.134

🇧🇪 207.175.7.61

🇺🇸 195.184.76.99

🇩🇪 167.94.146.48

🇺🇸 143.42.173.60

🇮🇳 106.216.79.207