JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.203.137

45.130.203.137 was found in our database!

This IP was reported 377 times. Confidence of Abuse is 100%: ?

100%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.203.137

Whois 45.130.203.137

IP Abuse Reports for 45.130.203.137:

This IP address has been reported a total of 377 times from 125 distinct sources. 45.130.203.137 was first reported on March 14th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 abenage	2026-07-03 11:53:06 (1 day ago)	45.130.203.137 - - [03/Jul/2026:05:53:05 -0600] "GET /backup/ HTTP/1.1" 404 162 "-" "Jobmaster-Opend ... show more 45.130.203.137 - - [03/Jul/2026:05:53:05 -0600] "GET /backup/ HTTP/1.1" 404 162 "-" "Jobmaster-Opendir/1.0" show less	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-03 11:20:24 (1 day ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇫🇷 masterguru	2026-07-03 08:13:29 (1 day ago)	Restricted File Access Attempt. Matched phrase ".sql.gz" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇫🇷 Guardian	2026-07-01 09:48:13 (3 days ago)	Unauthorized attempt to retrieve configuration file 45.130.203.137 [01/Jul/2026:09:48:12] "GET /.env ... show more Unauthorized attempt to retrieve configuration file 45.130.203.137 [01/Jul/2026:09:48:12] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇨🇭 YF	2026-07-01 06:30:36 (3 days ago)	Git HEAD exposure probe	Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 06:23:12 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 02:22:54.877953 2026] [security2:error] [pid 10594:tid 10594] [client 45.130.203.137:24183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jiggaboojones.indie100.com"] [uri "/.git/HEAD"] [unique_id "akSyPlXF5ZmFTOAn-ZxMdgAAADs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 Saec	2026-07-01 06:15:09 (3 days ago)	Jarvis auto-ban: CF honeypot path /.env (6× on saec.me)	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 03:41:43 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 23:41:38.283530 2026] [security2:error] [pid 13631:tid 13631] [client 45.130.203.137:29787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.boardinjapan.com.smogsandiego.com"] [uri "/.git/HEAD"] [unique_id "akSMcvROuYfzGm7P7wOp9AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 sajmon0011	2026-06-30 23:49:51 (4 days ago)	45.130.203.137 - - [01/Jul/2026:01:49:50 +0200] "GET /.git/HEAD HTTP/1.1" 404 196 "-" "Python-urllib ... show more 45.130.203.137 - - [01/Jul/2026:01:49:50 +0200] "GET /.git/HEAD HTTP/1.1" 404 196 "-" "Python-urllib/3.10" ... show less	Web App Attack
🇨🇦 1gz	2026-06-30 21:42:55 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /tmp/web.tar.gz UA: Jobmaster-Opendir/1.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 mawan	2026-06-28 10:51:15 (6 days ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 04:13:22 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 00:13:16.720774 2026] [security2:error] [pid 13164:tid 13164] [client 45.130.203.137:35537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "willark.ryanc.net"] [uri "/.git/HEAD"] [unique_id "akCfXLs7pDwpisrM0oXDRAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 CollideTech	2026-06-28 00:58:20 (1 week ago)	probing for vulnerabilities	Web App Attack
🇨🇴 adalbertoreyes.org	2026-06-25 17:44:23 (1 week ago)	CategoryPortScan	Port Scan
🇫🇮 as211431.net	2026-06-24 21:46:00 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/HEAD UA: Python-urllib/3.10 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 377 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 212.119.47.106

🇧🇴 200.105.172.184

🇺🇸 161.35.105.198

🇸🇬 101.32.145.199

🇱🇹 62.60.130.219

🇧🇷 45.205.1.223

🇩🇪 45.3.43.186

🇨🇳 27.8.44.168

🇷🇴 2.57.122.209

🇬🇧 2.57.17.30

🇺🇸 2607:f8b0:4001:c00::128

🇺🇸 162.216.150.78

🇺🇸 162.216.149.15

🇺🇸 12.145.208.138

🇻🇳 103.153.254.96

🇦🇪 20.233.187.228

🇺🇸 174.138.79.226

🇻🇳 157.66.26.183

🇷🇴 86.123.119.109

🇫🇷 51.210.143.166