Total reports
8 from
7 distinct
reporters
First reported
July 21st 2025
Most recent report
6 days ago
Last 60 days
Top reporter locations
🇩🇪
Germany
2
🇺🇸
United States of America
2
🇫🇷
France
1
Most common categories
Bad Web Bot
4
Web App Attack
2
Brute-Force
2
Web Spam
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
jakob
2026-11-07 11:54:09
UTC ·
(6 days ago)
Fail2Ban rule: apache-cgit (robots.txt violation)
Bad Web Bot
🇫🇷
bigorre.org
2026-11-02 17:13:51
UTC ·
(1 week ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-30 00:01:25
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 103.112.56.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:01:16.905781 2026] [security2:error] [pid 16246:tid 16347] [client 103.112.56.45:39588] M ...
show more
(mod_security) mod_security (id:210350) triggered by 103.112.56.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:01:16.905781 2026] [security2:error] [pid 16246:tid 16347] [client 103.112.56.45:39588] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vivierae.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vivierae.com"] [uri "/"] [unique_id "auPeTG_Pv1flhA3dfGuzgQAAAVM"], referer: https://five.co.in/redirect.php?ref_host=wolfnh.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-09-29 05:21:06
UTC ·
(1 month ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-09-29 05:07:01
UTC ·
(1 month ago)
2026/09/29 07:07:00 [error] 46551#100686: *3609225 access forbidden by rule, client: 103.112.56.45, server: new.hondaforum.hu, request: "GET /topic/honda-civic/746881/ HTTP/1.1", host: "new.hondaforum.hu"
...
Web Spam
🇺🇸
kosada.com
2026-08-31 11:33:58
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-09 09:39:24
UTC ·
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇫🇷
Dorian GRANDHAY
2025-07-21 16:21:34
UTC ·
(1 year ago)
103.112.56.45 (BD/Bangladesh/-), 5 distributed smtpauth attacks on account [[email protected] ] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: 2025-07-21 18:19:25 dovecot_plain authenticator failed for ([191.96.207 ...
show more
103.112.56.45 (BD/Bangladesh/-), 5 distributed smtpauth attacks on account [[email protected] ] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: 2025-07-21 18:19:25 dovecot_plain authenticator failed for ([191.96.207.22]) [103.112.56.45]:32874: 535 Incorrect authentication data ([email protected] )
2025-07-21 18:21:07 dovecot_login authenticator failed for ([191.96.207.22]) [181.46.185.45]:31975: 535 Incorrect authentication data ([email protected] )
2025-07-21 18:19:32 dovecot_login authenticator failed for ([191.96.207.22]) [103.112.56.45]:32874: 535 Incorrect authentication data ([email protected] )
2025-07-21 18:21:30 dovecot_plain authenticator failed for ([191.96.207.22]) [223.226.27.62]:52992: 535 Incorrect authentication data ([email protected] )
2025-07-21 18:20:59 dovecot_plain authenticator failed for ([191.96.207.22]) [181.46.185.45]:31975: 535 Incorrect authentication data ([email protected] )
IP Addresses Blocked:
show less
Port Scan
