JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.203.235

45.130.203.235 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 56%: ?

56%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.203.235

Whois 45.130.203.235

IP Abuse Reports for 45.130.203.235:

This IP address has been reported a total of 22 times from 10 distinct sources. 45.130.203.235 was first reported on August 15th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-26 09:42:53 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:42:44.044335 2026] [security2:error] [pid 27373:tid 27373] [client 45.130.203.235:29965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cognicom.com"] [uri "/.git/HEAD"] [unique_id "ao61FAfs3t0eTSruxZWv7gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-26 06:41:45 (1 day ago)	45.130.203.235 - - [26/Aug/2026:14:41:44 +0800] "GET /.git/HEAD HTTP/1.1" 301 237 "-" "Python-urllib ... show more 45.130.203.235 - - [26/Aug/2026:14:41:44 +0800] "GET /.git/HEAD HTTP/1.1" 301 237 "-" "Python-urllib/3.10" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 06:13:26 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 02:13:17.908657 2026] [security2:error] [pid 27726:tid 27726] [client 45.130.203.235:60115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "winfield-intl.com"] [uri "/.git/HEAD"] [unique_id "ao6D_bi1AJSoNLYg_5nR9wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 01:07:54 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 21:07:48.491897 2026] [security2:error] [pid 24713:tid 24713] [client 45.130.203.235:55551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "economy-cleaners.walkerweb.com"] [uri "/.git/HEAD"] [unique_id "ao48ZBEryleoS1doS4mmHAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Dominik Lysiak	2026-08-25 21:00:32 (2 days ago)	45.130.203.235 - - [25/Aug/2026:23:00:31 +0200] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib ... show more 45.130.203.235 - - [25/Aug/2026:23:00:31 +0200] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" 45.130.203.235 - - [25/Aug/2026:23:00:31 +0200] "GET /.git/HEAD HTTP/1.1" 404 146 "-" "Python-urllib/3.10" 45.130.203.235 - - [25/Aug/2026:23:00:31 +0200] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 19:04:35 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:04:27.023860 2026] [security2:error] [pid 20462:tid 20462] [client 45.130.203.235:51793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lp.veneerdent.com"] [uri "/.git/HEAD"] [unique_id "ao3nOyUbXe3LuHgQEHlY8AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 17:42:13 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 13:42:02.510249 2026] [security2:error] [pid 622:tid 622] [client 45.130.203.235:39333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thepeonypeople.com.vanemby.com"] [uri "/.git/HEAD"] [unique_id "ao3T6rjybwLTBwDMQiTWJwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 14:13:53 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:13:48.381247 2026] [security2:error] [pid 25031:tid 25031] [client 45.130.203.235:57983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uncle-david.com"] [uri "/.git/HEAD"] [unique_id "ao2jHEThCfyqdSWF1PhztgAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-08-25 09:44:47 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/HEAD UA: Python-urllib/3.10 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-25 03:25:01 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 23:24:55.156329 2026] [security2:error] [pid 22794:tid 22794] [client 45.130.203.235:23913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ttlatl.com"] [uri "/.git/HEAD"] [unique_id "ao0LBycvqRssDqHHEWjamwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-08-23 00:11:50 (5 days ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.235 - - [20/Aug/2026:06:44:12 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.235 - - [20/Aug/2026:06:44:12 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" show less	Web App Attack
🇬🇷 mail.avx.gr	2026-08-21 17:36:07 (6 days ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.235 - - [20/Aug/2026:06:44:12 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.235 - - [20/Aug/2026:06:44:12 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" show less	Web App Attack
🇫🇷 mail.avx.gr	2026-08-20 03:44:15 (1 week ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.235 - - [20/Aug/2026:06:44:12 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.235 - - [20/Aug/2026:06:44:12 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-19 18:21:40 (1 week ago)	[19/Aug/2026:21:21:40 +0300] -- 45.130.203.235 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.gi ... show more [19/Aug/2026:21:21:40 +0300] -- 45.130.203.235 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/HEAD HTTP/1.1 show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-18 21:59:39 (1 week ago)	Auto-ban: >3000 req/min op 2026-08-18	Web App Attack SSH Hacking

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 2a01:9580:8409:2:9999::199

🇯🇵 207.148.110.181

🇨🇱 201.239.193.49

🇧🇪 198.235.24.251

🇧🇪 198.235.24.215

🇳🇱 195.178.110.232

🇬🇧 185.216.146.118

🇺🇸 172.110.223.207

🇻🇳 161.248.147.157

🇨🇴 161.18.234.168

🇨🇴 161.18.228.75

🇭🇰 154.221.20.92

🇺🇸 147.185.132.91

🇨🇳 117.188.213.39

🇨🇳 116.7.248.50

🇭🇰 101.36.123.67

🇺🇸 91.230.168.170

🇳🇱 89.248.165.203

🇩🇪 47.91.72.158

🇷🇺 46.146.238.1