JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.203.174

45.130.203.174 was found in our database!

This IP was reported 413 times. Confidence of Abuse is 67%: ?

67%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.203.174

Whois 45.130.203.174

IP Abuse Reports for 45.130.203.174:

This IP address has been reported a total of 413 times from 134 distinct sources. 45.130.203.174 was first reported on March 25th 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-26 09:03:08 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:03:02.757134 2026] [security2:error] [pid 22242:tid 22242] [client 45.130.203.174:47713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wvbigdaddy.com"] [uri "/.git/HEAD"] [unique_id "ao6rxtOffrdx018LsmgYSQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 06:09:39 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 02:09:33.435998 2026] [security2:error] [pid 3684814:tid 3684840] [client 45.130.203.174:40121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.windstream-sales.com"] [uri "/.git/HEAD"] [unique_id "ao6DHaCHWPqSEswek_MVwgAAAFM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 19:04:34 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:04:27.029720 2026] [security2:error] [pid 25597:tid 25597] [client 45.130.203.174:59229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dental.veneerdent.com"] [uri "/.git/HEAD"] [unique_id "ao3nO6lJ5P3VaWLwmahJmQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-08-25 18:46:09 (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git) show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 18:41:38 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 14:41:32.716437 2026] [security2:error] [pid 17741:tid 17741] [client 45.130.203.174:45087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "veenstras.com"] [uri "/.git/HEAD"] [unique_id "ao3h3N88Hh4-CdmZfniVZQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 14:58:30 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:58:15.466241 2026] [security2:error] [pid 8059:tid 8059] [client 45.130.203.174:30755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.unwaved.com"] [uri "/.git/HEAD"] [unique_id "ao2thywKh18PSqaDq5J_zQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 14:27:24 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:27:18.338534 2026] [security2:error] [pid 3580:tid 3580] [client 45.130.203.174:25635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unified-dispatch.com"] [uri "/.git/HEAD"] [unique_id "ao2mRq3yinmvkqIr0qY3bgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 03:49:23 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 23:49:16.106796 2026] [security2:error] [pid 6958:tid 6958] [client 45.130.203.174:41339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tommckee.tunabay.com"] [uri "/.git/HEAD"] [unique_id "ao0QvJTLwMzXwwFNSm-SnAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 JCB	2026-08-20 22:01:00 (5 days ago)	45.130.203.174 - - [20/Aug/2026:02:44:44 +0300] "GET /files/ HTTP/1.1" 404 236 "-" "Mozilla/5.0"	Web App Attack
🇳🇱 knock	2026-08-19 12:59:26 (1 week ago)	Knock-Knock honeypot brute-force: proto8 (2 total hits)	Brute-Force
🇩🇪 IVski.com	2026-08-18 08:24:46 (1 week ago)	IVski WAF \| Sensitive file probe detected - looking for .git	Hacking Brute-Force Web App Attack
🇫🇮 as211431.net	2026-08-15 23:15:41 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env UA: Python-urllib/3.10 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-08-15 07:25:29 (1 week ago)	[15/Aug/2026:10:25:29 +0300] -- 45.130.203.174 Ban reason: User-Agent Python-urllib	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 02:27:07 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 22:26:59.687330 2026] [security2:error] [pid 1178537:tid 1178537] [client 45.130.203.174:57515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cwvr.org"] [uri "/.env.production"] [unique_id "an_OcxNOz_yHtWqBaD3F5wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Gabriel Camargo	2026-08-15 01:14:53 (1 week ago)	45.130.203.174 - - [14/Aug/2026:20:14:45 -0500] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Python-urllib ... show more 45.130.203.174 - - [14/Aug/2026:20:14:45 -0500] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Python-urllib/3.10" 45.130.203.174 - - [14/Aug/2026:20:14:46 -0500] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Python-urllib/3.10" 45.130.203.174 - - [14/Aug/2026:20:14:46 -0500] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Python-urllib/3.10" ... show less	Brute-Force SSH

Showing 1 to 15 of 413 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 91.92.40.24

🇺🇸 2400:cb00:988:1000:9257:59ea:6634:5a96

🇺🇸 198.143.56.4

🇳🇱 172.94.9.107

🇨🇳 106.75.181.7

🇨🇳 101.126.53.14

🇳🇱 45.148.10.240

🇧🇾 37.215.37.206

🇨🇦 15.157.122.50

🇷🇴 2.57.122.150

🇺🇸 2600:1f18:3120:f500:dc81:a84c:b1bf:6c9e

🇺🇸 2400:cb00:988:1000:ed02:ac35:e748:be86

🇪🇸 176.85.175.201

🇺🇸 172.68.175.115

🇺🇸 172.68.174.122

🇨🇳 171.223.228.104

🇺🇸 104.23.160.183

🇺🇸 104.23.160.42

🇺🇸 45.156.129.70

🇯🇴 212.34.20.117