JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.203.150

45.130.203.150 was found in our database!

This IP was reported 347 times. Confidence of Abuse is 100%: ?

100%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.203.150

Whois 45.130.203.150

IP Abuse Reports for 45.130.203.150:

This IP address has been reported a total of 347 times from 125 distinct sources. 45.130.203.150 was first reported on December 6th 2023, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Feelautom	2026-07-04 08:43:18 (13 hours ago)	[FeelAutom Auto-Ban] AI Analyst: Score 180, comportement malveillant	Hacking
🇧🇬 pa4080	2026-07-04 07:03:47 (14 hours ago)	Detected by ModSecurity. Request URI: /.git/HEAD	Web App Attack
🇧🇪 cmbplf	2026-07-03 16:52:26 (1 day ago)	117 requests with url.path *.sql.gz	Brute-Force Bad Web Bot
🇺🇸 abenage	2026-07-03 11:54:44 (1 day ago)	45.130.203.150 - - [03/Jul/2026:05:54:43 -0600] "GET /backups/[redacted].zip HTTP/1.1" 404 162 "-" " ... show more 45.130.203.150 - - [03/Jul/2026:05:54:43 -0600] "GET /backups/[redacted].zip HTTP/1.1" 404 162 "-" "Jobmaster-Opendir/1.0" show less	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-03 11:20:44 (1 day ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇫🇷 masterguru	2026-07-03 08:14:00 (1 day ago)	Restricted File Access Attempt. Matched phrase ".sql.gz" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇺🇸 xxkodedxx	2026-07-02 09:40:01 (2 days ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: EG / AS137409 GSL Networks Pty LTD Active: 09:39:52 UTC Volume: 1 HTTP req Probed: /.git/HEAD Status mix: 444×1 UA: "Python-urllib/3.10" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
Anonymous	2026-07-02 09:30:02 (2 days ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 06:47:56 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 45.130.203.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:949110) triggered by 45.130.203.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 02:47:47.936638 2026] [security2:error] [pid 23307:tid 23307] [client 45.130.203.150:38675] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.cwbaz.com.maricotippett.com"] [uri "/.env.production"] [unique_id "akYJk-yK6dbQybwfdG5-MAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Guardian	2026-07-01 09:47:55 (3 days ago)	Unauthorized attempt to retrieve configuration file 45.130.203.150 [01/Jul/2026:09:47:48] "GET /.env ... show more Unauthorized attempt to retrieve configuration file 45.130.203.150 [01/Jul/2026:09:47:48] "GET /.env.production HTTP/1.1" show less	Port Scan Web App Attack
🇧🇪 Saec	2026-07-01 06:30:16 (3 days ago)	Jarvis auto-ban: CF honeypot path /.env (1× on saec.me)	Port Scan Web App Attack
🇨🇦 1gz	2026-06-30 21:43:06 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /tmp/social.tgz UA: Jobmaster-Opendir/1.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-30 13:31:01 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 45.130.203.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.130.203.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 09:30:48.174628 2026] [security2:error] [pid 1219:tid 1219] [client 45.130.203.150:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dashboard.luisguacache.com\|F\|2"] [data ".luisguacache.com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dashboard.luisguacache.com"] [uri "/backups/dashboard.luisguacache.com.sql"] [unique_id "akPFCMdljAfu60WqI5CzyQAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 matatunos	2026-06-29 20:00:14 (5 days ago)	Honeypot favala.es: 1 peticiones web a rutas de ataque (/wp-login, /.env, etc.) en 24h. Reporte auto ... show more Honeypot favala.es: 1 peticiones web a rutas de ataque (/wp-login, /.env, etc.) en 24h. Reporte automático. show less	Web App Attack Bad Web Bot
🇩🇪 neckaralb-admin.de	2026-06-28 07:39:37 (6 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 347 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.253.66.216

🇨🇳 36.110.14.155

🇰🇷 2401:c080:1c00:28de:650e:3ae6:6ab:10d

🇮🇩 180.248.56.127

🇬🇧 154.16.44.207

🇩🇪 87.106.239.83

🇬🇧 35.203.210.137

🇹🇭 165.154.51.225

🇩🇪 164.90.176.216

🇩🇪 69.5.169.18

🇺🇸 54.205.156.147

🇺🇸 20.221.71.226

🇺🇸 20.168.1.102

🇧🇯 154.127.36.8

🇹🇷 94.154.43.181

🇨🇦 72.57.81.33

🇦🇷 45.162.20.70

🇬🇧 35.203.211.165

🇫🇮 147.185.133.47

🇺🇸 147.185.132.177