JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.130.203.246

Recent Activity

Abuse confidence score ?

89% Critical

86 reports

35 reporters · latest 1 hour ago

ISP	Legaco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	legaconetworks.nl
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 45.130.203.246

Export CSV

This IP address has been reported a total of 86 times from 35 distinct sources. 45.130.203.246 was first reported on August 17th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: United States of America with 46 reports; Netherlands with 9 reports; Germany with 6 reports. Over the same time period, 45.130.203.246 has changed country of origin 2 times. The most common categories in these recent reports were: Web App Attack 77 times; Bad Web Bot 55 times; Brute-Force 45 times; Hacking 8 times; Port Scan 3 times; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-05 18:16:16 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 14:16:10.952265 2026] [security2:error] [pid 10625:tid 10625] [client 45.130.203.246:34781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partycocktailnapkins.com"] [uri "/.git/HEAD"] [unique_id "asPpaliAsUw_pZotI3infQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-05 17:16:36 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 13:16:29.615317 2026] [security2:error] [pid 1738:tid 1738] [client 45.130.203.246:45251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "badfoodlawsuit.com"] [uri "/.git/HEAD"] [unique_id "asPbbR_N70vJfEIc7LX4TAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 webanyone	2026-10-05 16:55:07 (1 week ago)	Secret file probe \| method: GET \| path: /.git/HEAD \| ua: Python-urllib/3.10	Hacking Web App Attack
🇧🇷 P1n4	2026-10-05 16:45:46 (1 week ago)	Heimdal IDS auto-block: sensitive_file (score=0.80)	Web App Attack
🇺🇸 threatintelligence_bvc	2026-10-02 21:40:55 (1 week ago)		Brute-Force
🇹🇷 Doruk	2026-09-29 18:00:02 (2 weeks ago)	Unauthorized connection attempt	Brute-Force
🇦🇱 router.al	2026-09-22 05:16:00 (3 weeks ago)	09/22/2026-05:16:00.304965 45.130.203.246 Protocol: 6 GPL WEB_SERVER 403 Forbidden	Port Scan
🇳🇱 Alt255	2026-09-21 22:22:59 (3 weeks ago)	[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.130.203.246 - - [22/Sep/2026:00:22:59 +0200] "GET /.git/HEAD HTTP/1.1" 301 585 "-" "Python-urllib/3.10" ... show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-15 15:05:23 (4 weeks ago)	[topuurbd] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 45 ... show more [topuurbd] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 45.130.203.246 - - \[11/Sep/2026:06:10:05 +0200\] "GET /.git/HEAD HTTP/1.1" 301 579 "-" "Python-urllib/3.10" 45.130.203.246 - - \[11/Sep/2026:06:10:05 +0200\] "GET /.git/HEAD HTTP/1.1" 301 579 "-" "Python-urllib/3.10" 45.130.203.246 - - \[11/Sep/2026:06:10:05 +0200\] "GET /.git/HEAD HTTP/1.1" 301 567 "-" "Python-urllib/3.10" 45.130.203.246 - - \[11/Sep/2026:06:10:06 +0200\] "GET /.git/HEAD HTTP/1.1" 301 564 "-" "Python-urllib/3.10" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 07:12:48 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 03:12:42.107388 2026] [security2:error] [pid 10394:tid 10394] [client 45.130.203.246:59305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "resume.martinka.org"] [uri "/.git/HEAD"] [unique_id "aqT7au8r5HydO4BfsSSO6wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 05:58:48 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 01:58:38.115302 2026] [security2:error] [pid 31683:tid 31683] [client 45.130.203.246:61833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cloud.l3l4.com"] [uri "/.git/HEAD"] [unique_id "aqTqDoQmFSd8qC5_Tyyp1AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 04:28:32 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 00:28:26.041445 2026] [security2:error] [pid 23693:tid 23693] [client 45.130.203.246:60189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dryrot.corepest.com"] [uri "/.git/HEAD"] [unique_id "aqTU6l_hUJ2ntLkGL3uExQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 03:53:46 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 23:53:40.462189 2026] [security2:error] [pid 13567:tid 13567] [client 45.130.203.246:62147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.665summit.gonzalez.com"] [uri "/.git/HEAD"] [unique_id "aqTMxF1lyUd2Ie-QFQSLUgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-12 02:36:18 (1 month ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/HEAD \| 2026-09-12 02:36 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 00:01:30 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.130.203.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 20:01:26.557584 2026] [security2:error] [pid 22088:tid 22088] [client 45.130.203.246:54259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nick929.summitmediawv.com"] [uri "/.git/HEAD"] [unique_id "aqSWVn0FJreuVzj-ohxgEQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 16 to 30 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.218.206.102

🇳🇱 204.76.203.4

🇫🇷 157.173.99.106

🇮🇩 103.24.212.134

🇸🇬 47.128.19.159

🇸🇬 47.128.19.16

🇸🇬 8.219.222.66

🇺🇸 207.90.244.4

🇬🇧 193.163.125.51

🇧🇷 179.157.249.30

🇭🇰 165.154.156.67

🇺🇸 136.64.34.80

🇱🇰 112.135.233.29

🇮🇳 103.160.27.103

🇫🇷 91.231.89.5

🇵🇱 87.251.64.123

🇫🇷 85.217.140.30

🇸🇬 47.128.19.154

🇸🇬 47.128.19.153

🇧🇷 45.183.115.187