JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.203.157

45.130.203.157 was found in our database!

This IP was reported 351 times. Confidence of Abuse is 71%: ?

71%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.203.157

Whois 45.130.203.157

IP Abuse Reports for 45.130.203.157:

This IP address has been reported a total of 351 times from 122 distinct sources. 45.130.203.157 was first reported on July 9th 2024, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 CounterScrape	2026-07-02 00:01:54 (8 hours ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇧🇪 Saec	2026-07-01 06:15:49 (1 day ago)	Jarvis auto-ban: CF honeypot path /.env (2× on saec.me)	Port Scan Web App Attack
🇺🇸 CounterScrape	2026-07-01 00:01:44 (1 day ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇨🇦 1gz	2026-06-30 21:42:52 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /bak/social.sql.gz UA: Jobmaster-Opendir/1.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 CounterScrape	2026-06-30 00:01:29 (2 days ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
Anonymous	2026-06-29 10:48:29 (2 days ago)	"GET /.git/HEAD HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 10:31:37 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 06:31:29.697201 2026] [security2:error] [pid 26647:tid 26647] [client 45.130.203.157:30425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moontouchmassage.leadek.com"] [uri "/.env.production"] [unique_id "akJJgQuY4KBdrtluuHHJMgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 CounterScrape	2026-06-29 00:01:06 (3 days ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇺🇸 CounterScrape	2026-06-28 00:00:37 (4 days ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇺🇸 TPI-Abuse	2026-06-24 12:04:40 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 08:04:34.995231 2026] [security2:error] [pid 1151:tid 1163] [client 45.130.203.157:59891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billingsleyonline.com"] [uri "/.git/HEAD"] [unique_id "ajvH0oPw1BderthOwjwd0gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 19:51:29 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 15:51:12.269850 2026] [security2:error] [pid 24540:tid 24540] [client 45.130.203.157:22247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hawaiivacations.com.kh6jim.com"] [uri "/.git/HEAD"] [unique_id "ajrjsHcxLZDruzWqm-QKTAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 Saec	2026-06-22 12:30:26 (1 week ago)	Jarvis auto-ban: CF honeypot path /.git/HEAD (2× on saec.me)	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 06:28:48 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 02:28:43.434606 2026] [security2:error] [pid 2551:tid 2551] [client 45.130.203.157:44627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.larrybridwell.com"] [uri "/.git/HEAD"] [unique_id "ajjWG1w5_i1ZZWAmqYkX5AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lnklnx	2026-06-22 05:18:15 (1 week ago)	sundown.lnklnx.com:80 45.130.203.157 - - [22/Jun/2026:00:18:13 -0500] "GET /.git/HEAD HTTP/1.1" 301 ... show more sundown.lnklnx.com:80 45.130.203.157 - - [22/Jun/2026:00:18:13 -0500] "GET /.git/HEAD HTTP/1.1" 301 604 "-" "Python-urllib/3.10" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 03:53:18 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 23:53:03.409359 2026] [security2:error] [pid 1173:tid 1180] [client 45.130.203.157:59247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.piazza9.com"] [uri "/.git/HEAD"] [unique_id "ajixn4RYcqnjXK9qizd8DAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 351 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.172.85.139

🇮🇪 52.212.237.239

🇭🇰 47.238.127.5

🇺🇸 20.80.72.203

🇮🇪 2603:1062:0:bd::15

🇳🇱 193.176.31.252

🇨🇳 122.51.236.174

🇮🇪 108.131.94.96

🇺🇸 64.62.156.64

🇺🇸 45.131.193.106

🇮🇪 18.202.225.148

🇺🇸 18.189.74.1

🇮🇪 2a05:d018:10df:d402:17c:d7d5:6901:1b32

🇪🇸 158.49.70.49

🇸🇪 157.22.17.156

🇺🇸 146.19.90.85

🇨🇳 123.233.235.86

🇫🇷 88.168.108.88

🇩🇪 78.46.165.9

🇮🇪 54.74.215.232