🇺🇸
mnsf
2026-06-10 19:05:58
(3 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇮🇩
Burayot
2026-05-14 18:59:05
(4 weeks ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.51.71 (US/United States/-): 2 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.51.71 (US/United States/-): 2 in the last 3600 secs
show less
Web App Attack
🇺🇸
ShadowWhisperer
2026-05-06 07:41:11
(1 month ago)
DOCKER port scan / probe. GET /secrets
Port Scan
2026-03-03 02:16:20
(3 months ago)
"GET /.git/HEAD HTTP/1.1"
Hacking
Web App Attack
🇩🇪
Petros Stefanakis
2025-12-29 15:58:27
(5 months ago)
(mod_security) mod_security triggered on hostname [redacted] 45.3.51.71 (US/United States/-)
SQL Injection
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:05
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-26 16:30:38
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.71 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 26 11:30:34.448953 2025] [security2:error] [pid 6785:tid 6785] [client 45.3.51.71:54779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "b2c-llc.com"] [uri "/wp-config.php"] [unique_id "aU64Kv4XZv5CdTW-Ge95xAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-12-10 06:52:42
(6 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2025-12-04 19:51:13
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.71 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 14:51:10.826096 2025] [security2:error] [pid 2424:tid 2424] [client 45.3.51.71:30143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "journ-e.xyz"] [uri "/.env"] [unique_id "aTHmLtZhKhIVLQWPest0ugAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-04 10:45:02
(6 months ago)
File repository snooping:
45.3.51.71 - - [04/Dec/2025:10:34:56 +0000] "GET /.git/HEAD HTTP/1.1" 404 ...
show more
File repository snooping:
45.3.51.71 - - [04/Dec/2025:10:34:56 +0000] "GET /.git/HEAD HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0"
show less
Hacking
Web App Attack
🇺🇸
jcbriar
2025-11-25 21:57:05
(6 months ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:53:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.71 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:53:19.675063 2025] [security2:error] [pid 14271:tid 14271] [client 45.3.51.71:31047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.pseudospace.com"] [uri "/.svn/wc.db"] [unique_id "aSQO7x-U7ENJS4z2oVPo6wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:17:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.71 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:17:05.982318 2025] [security2:error] [pid 10290:tid 10290] [client 45.3.51.71:39625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.robertlundquist.com"] [uri "/.env"] [unique_id "aSQGcYRoMo-N1Qug5OopPgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Thaliruth
2025-11-24 04:30:55
(6 months ago)
[24/Nov/2025:05:30:54.151896 +0100] aSPfftopfyKzn6OELpGc5wAAAEU 45.3.51.71 59240 127.0.0.1 7080
...
Hacking
2025-11-14 03:42:47
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack