JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.203.135

45.130.203.135 was found in our database!

This IP was reported 351 times. Confidence of Abuse is 80%: ?

80%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.203.135

Whois 45.130.203.135

IP Abuse Reports for 45.130.203.135:

This IP address has been reported a total of 351 times from 118 distinct sources. 45.130.203.135 was first reported on July 10th 2024, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Guardian	2026-07-01 09:47:41 (22 hours ago)	Unauthorized attempt to retrieve configuration file 45.130.203.135 [01/Jul/2026:09:47:38] "GET /.env ... show more Unauthorized attempt to retrieve configuration file 45.130.203.135 [01/Jul/2026:09:47:38] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇧🇪 Saec	2026-07-01 06:15:33 (1 day ago)	Jarvis auto-ban: CF honeypot path /.env (3× on saec.me)	Port Scan Web App Attack
🇫🇷 pm33	2026-07-01 04:30:02 (1 day ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇨🇭 YF	2026-06-30 22:54:32 (1 day ago)	Git HEAD exposure probe	Web App Attack
🇨🇦 1gz	2026-06-30 21:42:54 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (HEAD ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (HEAD method) Endpoint: /tmp/social.7z UA: Jobmaster-Opendir/1.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-30 13:31:25 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 45.130.203.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.130.203.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 09:31:20.719333 2026] [security2:error] [pid 30109:tid 30109] [client 45.130.203.135:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dashboard.luisguacache.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dashboard.luisguacache.com"] [uri "/bak/backup.sql"] [unique_id "akPFKI8BQzJpiQmUcYVUrQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 sid3windr	2026-06-29 14:06:47 (2 days ago)	GET /.env (Tarpitted for 19m44s, wasted 69.49kB)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 02:18:19 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 22:18:15.525798 2026] [security2:error] [pid 6067:tid 6067] [client 45.130.203.135:23797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.montidaunitour.com.my-spec.com"] [uri "/.git/HEAD"] [unique_id "akHV5_LmxZS17TwL6oJMpgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 wpadm4	2026-06-28 03:15:28 (4 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇮 as211431.net	2026-06-24 21:45:59 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/HEAD UA: Python-urllib/3.10 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-23 22:47:58 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 18:47:54.356557 2026] [security2:error] [pid 32652:tid 32652] [client 45.130.203.135:62297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.versacardio.com"] [uri "/.git/HEAD"] [unique_id "ajsNGvXhkPzYDJ43zzHIuQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 Saec	2026-06-22 12:45:06 (1 week ago)	Jarvis auto-ban: CF honeypot path /.git/HEAD (1× on saec.me)	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 02:08:59 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 22:08:52.792288 2026] [security2:error] [pid 10034:tid 10039] [client 45.130.203.135:27049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.internationalacademyofprojectmanagement.com"] [uri "/.git/HEAD"] [unique_id "ajiZNH45Qf01-xLBQ-ijCwAAAQM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-22 01:12:50 (1 week ago)	fail2ban: Sensitive web probes detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 20:09:51 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 16:09:44.721070 2026] [security2:error] [pid 6607:tid 6607] [client 45.130.203.135:23643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.inlinesoftware.net"] [uri "/.git/HEAD"] [unique_id "ajhFCPmYV7wXf5xoJ4PDDgAAACA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 351 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.35

🇮🇩 139.255.254.163

🇦🇺 103.214.20.196

🇳🇱 91.92.40.239

🇳🇱 45.148.10.147

🇯🇵 40.81.194.185

🇦🇺 209.38.87.218

🇺🇸 192.254.119.131

🇺🇸 162.216.149.32

🇺🇸 155.229.73.115

🇮🇳 152.59.154.102

🇨🇳 59.46.193.187

🇬🇧 31.14.254.50

🇸🇬 193.37.32.16

🇷🇺 185.61.92.84

🇺🇸 162.216.150.241

🇳🇱 147.45.50.96

🇩🇪 69.5.169.153

🇺🇸 66.132.186.214

🇹🇼 60.198.67.108