JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.203.173

45.130.203.173 was found in our database!

This IP was reported 375 times. Confidence of Abuse is 75%: ?

75%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.203.173

Whois 45.130.203.173

IP Abuse Reports for 45.130.203.173:

This IP address has been reported a total of 375 times from 131 distinct sources. 45.130.203.173 was first reported on March 25th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Progetto1	2026-07-12 22:48:02 (1 week ago)	Detected via HAProxyScanner at 2026-07-12 22:48:02 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-07-12 22:48:02 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force
🇺🇸 CBJ	2026-07-09 00:19:44 (1 week ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 21:53:00 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 17:52:52.545507 2026] [security2:error] [pid 1315:tid 1315] [client 45.130.203.173:39269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "b2c-llc.anthonyanimalclinic.net"] [uri "/.git/HEAD"] [unique_id "ak7GtDAdd9cFkjGr4E3iggAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 GoodOldTOS	2026-07-08 18:44:12 (1 week ago)	Bad keywords detected in request: /.git	Web App Attack
🇺🇸 kosada.com	2026-07-08 15:58:40 (1 week ago)	Web vulnerability probing: /wp-includes/ID3/wp-conflg.php	Web App Attack
🇧🇪 cmbplf	2026-07-03 15:01:03 (2 weeks ago)	117 requests with url.path *.sql.gz	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-03 14:18:56 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 10:18:49.943075 2026] [security2:error] [pid 19785:tid 19785] [client 45.130.203.173:53201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cynosure.email.pluralmatrix.net"] [uri "/.git/HEAD"] [unique_id "akfEyZkCt8fVbdWNfqBgTAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 abenage	2026-07-03 11:54:12 (2 weeks ago)	45.130.203.173 - - [03/Jul/2026:05:54:11 -0600] "GET /backup/mailserver.7z HTTP/1.1" 404 162 "-" "Jo ... show more 45.130.203.173 - - [03/Jul/2026:05:54:11 -0600] "GET /backup/mailserver.7z HTTP/1.1" 404 162 "-" "Jobmaster-Opendir/1.0" show less	Bad Web Bot Web App Attack
Anonymous	2026-07-03 11:38:02 (2 weeks ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 ghostwarriors	2026-07-03 11:20:34 (2 weeks ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 08:21:05 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 04:20:58.327623 2026] [security2:error] [pid 4477:tid 4477] [client 45.130.203.173:53203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yaseminelhan.com.kircali.net"] [uri "/.git/HEAD"] [unique_id "akdw6p07kaQ_Mw7eD9HeoQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-03 08:14:00 (2 weeks ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193) show less	Hacking
🇫🇷 Guardian	2026-07-01 09:47:48 (2 weeks ago)	Unauthorized attempt to retrieve configuration file (x2) 45.130.203.173 [01/Jul/2026:09:47:40] "GET ... show more Unauthorized attempt to retrieve configuration file (x2) 45.130.203.173 [01/Jul/2026:09:47:40] "GET /.env.production HTTP/1.1" 45.130.203.173 [01/Jul/2026:09:47:46] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇧🇪 Saec	2026-07-01 06:15:02 (2 weeks ago)	Jarvis auto-ban: CF honeypot path /.env (7× on saec.me)	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 00:09:30 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 20:09:24.989337 2026] [security2:error] [pid 26009:tid 26009] [client 45.130.203.173:32439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "muzenique.com.bridgital.com"] [uri "/.git/HEAD"] [unique_id "akRatGqKEs6FnRCnXsjQiAAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 375 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

192.168.149.197

192.168.126.85

🇫🇷 51.210.103.210

🇳🇱 195.178.110.30

192.168.142.38

🇻🇳 115.75.144.120

🇨🇳 47.120.30.67

🇨🇳 42.230.230.117

🇺🇸 3.63.96.177

192.168.93.141

🇩🇪 151.243.11.245

🇳🇱 45.148.10.240

🇬🇧 35.246.80.146

10.191.92.1

10.174.231.1

10.42.142.1

192.168.160.88

192.168.23.51

🇧🇷 177.53.247.76

🇨🇱 152.172.70.230