🇫🇷
Sklurk
2026-07-08 01:37:15
(1 day ago)
Web App Attack
Web App Attack
🇦🇺
MAGIC
2026-05-20 02:08:22
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇨🇳
ThreatBook.io
2026-04-30 22:50:56
(2 months ago)
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/45.3.51.173
2026-04-30 18:0 ...
show more
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/45.3.51.173
2026-04-30 18:04:56 /
2026-04-30 17:59:47 /
2026-04-30 17:46:01 /
2026-04-30 17:45:57 /
show less
Web App Attack
🇩🇪
kivitendo.de
2026-03-27 00:47:55
(3 months ago)
[Fri Mar 27 01:48:01.801705 2026] [access_compat:error] [pid 263666:tid 263704] [client 45.3.51.173: ...
show more
[Fri Mar 27 01:48:01.801705 2026] [access_compat:error] [pid 263666:tid 263704] [client 45.3.51.173:26299] AH01797: client denied by server configuration: /var/www/kivitendo-erp-git/config/.env
[Fri Mar 27 01:48:01.901514 2026] [access_compat:error] [pid 263666:tid 263706] [client 45.3.51.173:26299] AH01797: client denied by server configuration: /var/www/kivitendo-erp-git/.git/config
...
show less
Brute-Force
Web App Attack
🇮🇩
Burayot
2026-03-27 00:17:59
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.51.173 (US/United States/-): 1 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.51.173 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(3 months ago)
"DDoS against public endpoint"
DDoS Attack
2025-12-07 20:08:30
(7 months ago)
botnet
DDoS Attack
🇳🇱
jjnxpct
2025-12-07 04:54:41
(7 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.aws/credentials (Rule ID: 930130) - Restricted File Access Attempt
show less
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2025-12-06 23:01:54
(7 months ago)
Auto-ban: >3000 req/min op 2025-12-06
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-12-06 20:08:31
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.173 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 15:08:27.645607 2025] [security2:error] [pid 29100:tid 29100] [client 45.3.51.173:19915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agupgrade.net"] [uri "/.git/HEAD"] [unique_id "aTSNO0SZTm5lHXpvG5qt7wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:47:11
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.173 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:47:07.758706 2025] [security2:error] [pid 3687:tid 3687] [client 45.3.51.173:39335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brennanarchitecture.com"] [uri "/.svn/wc.db"] [unique_id "aTK4KzV7bpDjXilkrhkQIAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 03:35:37
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.173 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:35:34.236757 2025] [security2:error] [pid 426:tid 454] [client 45.3.51.173:19521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salvoni.com"] [uri "/.env"] [unique_id "aTJTBobLlxDrTNfT7bTkjQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 00:36:57
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.173 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 19:36:28.061834 2025] [security2:error] [pid 7672:tid 7672] [client 45.3.51.173:47123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cheappartyballoons.com"] [uri "/.git/HEAD"] [unique_id "aTIpDF8dQQXwLlP8GraPQgAAAGw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-02 08:50:23
(7 months ago)
botnet
DDoS Attack
2025-10-28 22:28:21
(8 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack