45.172.69.198

block ruleset A5EE6C8F745F0934168261886A3817E5C386412A

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36

Malicious activity detected

HTTP application-layer DoS / botnet traffic from 45.172.69.198: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.

L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /7-velo-electrique-ville | query: order=product.position.asc&productList ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /7-velo-electrique-ville | query: order=product.position.asc&productListView=grid&q=Famille-Kemen+ADV-Kemen+Tour-Tria show less

DDoS, Hack, Brute Force, Web Attack ...

Web bot: denial-of-service flood

Triggered Cloudflare WAF (firewallCustom) from BR. Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /add | UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.9619.1545 Mobile Safari/537.36 ... show more Triggered Cloudflare WAF (firewallCustom) from BR. Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /add | UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.9619.1545 Mobile Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less

Web bot: denial-of-service flood

Malicious activity detected

(mod_security) mod_security (id:210381) triggered by 45.172.69.198 (45-172-69-198.n-multimidia.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 09:57:46.595357 2026] [security2:error] [pid 5936:tid 5939] ... show more (mod_security) mod_security (id:210381) triggered by 45.172.69.198 (45-172-69-198.n-multimidia.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 09:57:46.595357 2026] [security2:error] [pid 5936:tid 5939] [client 45.172.69.198:33324] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||www.mentzlaw.com|F|4"] [data "REQUEST_URI=/louisianamanganeselawsuitlawyer/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mentzlaw.com"] [uri "/louisianamanganeselawsuitlawyer/%url%"] [unique_id "aaw86hlQd4pcJsNAmwYw8AAAAQA"] show less

Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -63.873 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa

DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent. ... show more DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443. show less

scanning http requests from known botnet

scanning http requests from known botnet