JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.203.238

45.130.203.238 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 38%: ?

38%

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.203.238

Whois 45.130.203.238

IP Abuse Reports for 45.130.203.238:

This IP address has been reported a total of 10 times from 6 distinct sources. 45.130.203.238 was first reported on August 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 mail.avx.gr	2026-08-23 00:11:51 (1 day ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.238 - - [20/Aug/2026:06:44:12 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.238 - - [20/Aug/2026:06:44:12 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" show less	Web App Attack
🇬🇷 mail.avx.gr	2026-08-21 17:36:07 (2 days ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.238 - - [20/Aug/2026:06:44:12 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.238 - - [20/Aug/2026:06:44:12 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" show less	Web App Attack
🇫🇷 mail.avx.gr	2026-08-20 03:44:14 (3 days ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.238 - - [20/Aug/2026:06:44:12 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 45.130.203.238 - - [20/Aug/2026:06:44:12 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10" show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-15 21:59:21 (1 week ago)	Auto-ban: >3000 req/min op 2026-08-15	Web App Attack SSH Hacking
🇩🇪 LRob	2026-08-15 16:42:11 (1 week ago)	Credential and secrets file probing \| req: /.env \| UA: Python-urllib/3.10	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 05:25:14 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 01:25:07.050081 2026] [security2:error] [pid 31802:tid 31802] [client 45.130.203.238:48381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.galvez.cc"] [uri "/.git/HEAD"] [unique_id "an_4M289WyR4Yjy-t8MSFwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 03:09:50 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 23:09:42.236605 2026] [security2:error] [pid 32137:tid 32137] [client 45.130.203.238:44735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lonb.org"] [uri "/.env"] [unique_id "an_YdiaSr_I6msH6MlPVEgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Gabriel Camargo	2026-08-15 01:14:52 (1 week ago)	45.130.203.238 - - [14/Aug/2026:20:14:44 -0500] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Python-urllib ... show more 45.130.203.238 - - [14/Aug/2026:20:14:44 -0500] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Python-urllib/3.10" 45.130.203.238 - - [14/Aug/2026:20:14:45 -0500] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Python-urllib/3.10" 45.130.203.238 - - [14/Aug/2026:20:14:46 -0500] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Python-urllib/3.10" ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-08-15 00:21:50 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 20:21:43.864374 2026] [security2:error] [pid 25915:tid 25915] [client 45.130.203.238:50245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vaxd.org"] [uri "/.env"] [unique_id "an-xF71fBR2TiefGEftscAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-08-14 23:02:02 (1 week ago)	[15/Aug/2026:02:02:02 +0300] -- 45.130.203.238 Ban reason: User-Agent Python-urllib	Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.87

🇺🇸 205.210.31.81

🇷🇺 195.78.105.70

🇩🇪 193.124.20.228

🇺🇸 144.126.216.218

🇨🇳 106.81.207.97

🇨🇱 45.65.240.168

🇳🇱 192.253.248.223

🇲🇽 189.215.120.81

🇵🇭 138.84.137.192

🇻🇳 116.110.213.171

🇻🇳 116.104.163.219

🇮🇳 103.241.45.120

🇭🇰 43.155.21.198

🇻🇳 14.230.214.170

🇩🇪 172.253.1.216

🇧🇷 167.250.45.24

🇺🇸 147.185.132.166

🇯🇵 124.155.125.131

🇧🇩 103.97.161.116