Report for IP: 46.151.182.7

Threat LevelHIGH66/1004 rule types across 3 attack categories
10 incidents · 4 rule types · confirmed on global blocklist · persistent 7-day campaign · seen 1h ago
PTR N/A
Org / ASN Ghosty Networks LLC
Country 🇩🇪 Germany
City Frankfurt am Main, Hesse
Timezone Europe/Berlin

Attack Analysis

IDS: Blocklist — Spamhaus DROP
This IP is on the Spamhaus DROP list — a dataset of netblocks hijacked or leased by professional spam and cybercrime operations with no legitimate users. Traffic from DROP-listed ranges is considered hostile by design. Blocking is unconditional.
Geo-Blocked Country
This IP was blocked purely based on its country of origin — the site owner has restricted access from this IP's geographic location due to a pattern of unwanted traffic from that region. This does not necessarily mean the specific IP itself has attacked anything; it reflects a blanket country-level policy.
.env File Exposure Probe
This IP requested a .env file (or a variant like .env.local, .env.production) — files that commonly contain database credentials, API keys, and other secrets for a web application. No legitimate visitor ever requests this path; it is exclusively probed by attackers hunting for leaked configuration.
Project & Infrastructure Config File Probe
This IP requested a root-level project or infrastructure file — docker-compose.yml, a Terraform state file, package.json, or a generic config/secrets.json — hunting for source code, deployment secrets, or infrastructure details accidentally left reachable over HTTP. No legitimate web visitor needs these.

Reports (10)

Date Severity Description
29 Sep 2026 - 23:23 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 8
29 Sep 2026 - 23:08 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
29 Sep 2026 - 10:05 high IDS: Blocklist — Spamhaus DROP listed IP
29 Sep 2026 - 10:05 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 9
29 Sep 2026 - 10:04 low Geo Blocker — Country Match
29 Sep 2026 - 10:04 medium Query Guard — Path Dotenv Exposed
29 Sep 2026 - 10:04 medium Query Guard — Path Project File Probe
27 Sep 2026 - 17:49 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 8
26 Sep 2026 - 04:32 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 8
22 Sep 2026 - 21:19 high IDS: Blocklist — Spamhaus DROP listed IP — ET DROP Spamhaus DROP Listed Traffic Inbound group 8