JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.203.134

45.130.203.134 was found in our database!

This IP was reported 422 times. Confidence of Abuse is 56%: ?

56%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇳🇱 Netherlands
City	Vaals, Limburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.203.134

Whois 45.130.203.134

IP Abuse Reports for 45.130.203.134:

This IP address has been reported a total of 422 times from 156 distinct sources. 45.130.203.134 was first reported on January 23rd 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 knock	2026-08-26 09:28:11 (1 week ago)	Knock-Knock honeypot brute-force: proto8 (1 total hits)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-26 06:23:27 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 02:23:20.557489 2026] [security2:error] [pid 2754:tid 2808] [client 45.130.203.134:33307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.wintechltd.com"] [uri "/.git/HEAD"] [unique_id "ao6GWAa5XU0BZHlzaCe75wAAAVc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 22:12:48 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 18:12:42.955065 2026] [security2:error] [pid 2735774:tid 2735818] [client 45.130.203.134:30781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vivierae.com"] [uri "/.git/HEAD"] [unique_id "ao4TWj6iW2O3PMjTO6MaWwAAAUY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-25 20:39:55 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 45.130.203.134 (EG/Egypt/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 45.130.203.134 (EG/Egypt/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-08-25 17:08:35 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 13:08:25.806759 2026] [security2:error] [pid 26021:tid 26021] [client 45.130.203.134:46985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nmposters.vabq.com"] [uri "/.git/HEAD"] [unique_id "ao3MCSoapZHFPE4rPdyNawAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 16:25:35 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:25:24.298886 2026] [security2:error] [pid 14865:tid 14865] [client 45.130.203.134:20417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sircain.cain2016.org"] [uri "/.git/HEAD"] [unique_id "ao3B9Opocy3IerIZqYAOdAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 03:49:25 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 23:49:16.026990 2026] [security2:error] [pid 7873:tid 7873] [client 45.130.203.134:63109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigblogcast3.tunabay.com"] [uri "/.git/HEAD"] [unique_id "ao0QvCOHB1M2JqtergquqQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 01:46:56 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 21:46:47.126043 2026] [security2:error] [pid 31678:tid 31678] [client 45.130.203.134:57205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tremulant.com"] [uri "/.git/HEAD"] [unique_id "aoz0B9SOwloHD7YUVzWodQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-08-23 00:11:40 (1 week ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.134 - - [20/Aug/2026:06:44:12 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.134 - - [20/Aug/2026:06:44:12 +0300] "GET /.git/HEAD HTTP/1.1" 404 808 "-" "Python-urllib/3.10" show less	Web App Attack
🇬🇷 mail.avx.gr	2026-08-21 17:35:56 (1 week ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.134 - - [20/Aug/2026:06:44:12 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.134 - - [20/Aug/2026:06:44:12 +0300] "GET /.git/HEAD HTTP/1.1" 404 808 "-" "Python-urllib/3.10" show less	Web App Attack
🇫🇷 mail.avx.gr	2026-08-20 03:44:17 (2 weeks ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.134 - - [20/Aug/2026:06:44:12 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.134 - - [20/Aug/2026:06:44:12 +0300] "GET /.git/HEAD HTTP/1.1" 404 808 "-" "Python-urllib/3.10" show less	Web App Attack
🇩🇪 IVski.com	2026-08-18 08:24:46 (2 weeks ago)	IVski WAF \| Sensitive file probe detected - looking for .git	Hacking Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-08-18 07:53:49 (2 weeks ago)	[18/Aug/2026:10:53:49 +0300] -- 45.130.203.134 Ban reason: User-Agent Python-urllib	Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-08-15 23:15:35 (2 weeks ago)	Triggered Cloudflare WAF (bic) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint ... show more Triggered Cloudflare WAF (bic) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env.production UA: Python-urllib/3.10 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇧🇪 voormedia	2026-08-15 10:09:48 (2 weeks ago)	Accessed trap at '/.git/HEAD'	Web App Attack

Showing 1 to 15 of 422 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4004:1002::12a

🇺🇸 66.132.195.18

🇦🇷 181.118.237.173

🇵🇰 101.53.228.115

🇫🇷 77.239.124.130

🇩🇪 69.5.169.59

🇮🇳 47.31.106.1

🇹🇷 45.136.7.77

🇬🇧 45.82.76.128

🇨🇳 42.100.24.8

🇺🇸 40.124.82.199

🇮🇩 27.131.1.45

🇳🇱 20.160.86.7

🇨🇦 4.204.224.164

🇻🇪 190.75.248.87

🇺🇸 165.154.172.8

🇨🇳 123.14.124.154

🇳🇬 102.88.137.145

🇺🇸 66.132.195.17

🇺🇸 66.132.186.247