JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

72.51.59.129

Activity Trending Down

Abuse Confidence Score

42% Elevated

35 reports

19 reporters · latest 4 weeks ago

ISP: Dynu Systems Incorporated
Usage Type: Data Center/Web Hosting/Transit
ASN: AS398019
Hostname(s): unassigned.72-51-59-129.spryt.net
Domain Name: dynu.com
Country: 🇺🇸 United States of America
City: Phoenix, Arizona

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

35 from 19 distinct reporters

First reported

September 25th 2026

Most recent report

4 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 18 🇫🇷 France 3 🇳🇱 Netherlands 3

Most common categories Web App Attack 31 Bad Web Bot 18 Brute-Force 16 Hacking 5 Port Scan 2

Old reports The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-04 19:48:57 (4 weeks ago)	$f2bV_matches	Brute-Force
🇵🇱 ketovoila.pl	2026-09-29 10:34:13 (1 month ago)	ketovoila.pl web app secret/repository scan: hits=2; unique_paths=2; sample_paths=/.env; UA="python-requests/2.26.0"; window=2026-09-29T10:34:13Z..2026-09-29T10:34:13Z HTTP methods: GET (1),POST (1).	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-29 10:00:31 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 LRob	2026-09-29 08:06:29 (1 month ago)	Secret file probe \| method: GET \| path: /le-groupe/nos-filiales/dg-consultants/.env \| ua: python-requests/2.26.0	Hacking Web App Attack
🇵🇾 armandosaucedo.me	2026-09-29 04:08:40 (1 month ago)	Threat Intelligence via ARMTI, Web Attack: GET /.env	Web App Attack
🇳🇱 Alt255	2026-09-29 01:14:44 (1 month ago)	[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 72.51.59.129 - - [29/Sep/2026:03:14:29 +0200] "GET /.env HTTP/2.0" 301 141 "-" "python-requests/2.26.0" ...	Bad Web Bot Web App Attack
🇫🇷 lindi	2026-09-28 22:56:09 (1 month ago)	trying to access .env file ...	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 20:27:43 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 72.51.59.129 (unassigned.72-51-59-129.spryt.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:27:38.461771 2026] [security2:error] [pid 10469:tid 10469] ... show more (mod_security) mod_security (id:210492) triggered by 72.51.59.129 (unassigned.72-51-59-129.spryt.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:27:38.461771 2026] [security2:error] [pid 10469:tid 10469] [client 72.51.59.129:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.hollyranch.com"] [uri "/.env"] [unique_id "arrNul3fG-guf5gMyltuhgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-09-28 19:04:42 (1 month ago)	[redacted] 72.51.59.129 - - [28/Sep/2026:20:04:39 +0100] "GET /.env HTTP/2.0" 301 290 "-" "python-requests/2.26.0" [redacted] 72.51.59.129 - - [28/Sep/2026:20:04:40 +0100] "GET /fr/.env/ HTTP/2.0" 404 34888 "-" "python-requests/2.26.0"	Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-09-28 18:30:21 (1 month ago)	Unauthorized access attempts: [GET] /.env UA: python-requests/2.26.0	Web App Attack
🇧🇪 Saec	2026-09-28 12:22:34 (1 month ago)	Jarvis auto-ban: Honeypot /.env via www.saec.ovh [US] ASN:Dynu Systems Incorporated	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 10:38:00 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 72.51.59.129 (unassigned.72-51-59-129.spryt.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 06:37:56.623079 2026] [security2:error] [pid 14745:tid 14757] ... show more (mod_security) mod_security (id:210492) triggered by 72.51.59.129 (unassigned.72-51-59-129.spryt.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 06:37:56.623079 2026] [security2:error] [pid 14745:tid 14757] [client 72.51.59.129:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindgardens.com"] [uri "/.env"] [unique_id "arpDhDr7ORXSOYdKuT_HMgAAAIo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 04:12:05 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 72.51.59.129 (unassigned.72-51-59-129.spryt.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 00:12:00.108789 2026] [security2:error] [pid 29765:tid 29765] ... show more (mod_security) mod_security (id:210492) triggered by 72.51.59.129 (unassigned.72-51-59-129.spryt.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 00:12:00.108789 2026] [security2:error] [pid 29765:tid 29765] [client 72.51.59.129:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sahinozalit.com"] [uri "/.env"] [unique_id "arnpECNiDlhXvPGA4He3YwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-28 03:26:40 (1 month ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇳🇱 Alt255	2026-09-27 21:51:28 (1 month ago)	[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 72.51.59.129 - - [27/Sep/2026:23:51:10 +0200] "GET /.env HTTP/2.0" 404 60005 "-" "python-requests/2.26.0" ...	Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 218.51.197.186

🇲🇽 187.190.35.163

🇺🇸 13.143.21.180

🇳🇱 169.150.196.10

🇵🇰 125.209.67.58

🇨🇳 115.191.40.54

🇳🇱 77.91.71.92

🇸🇬 47.128.41.55

🇧🇪 35.206.183.188

🇮🇱 20.217.203.17

🇩🇪 5.75.243.131

🇩🇪 209.166.27.50

🇧🇷 143.202.104.29

🇺🇸 142.248.83.111

🇮🇳 103.134.114.141

🇺🇸 100.29.192.51

🇩🇪 69.5.169.243

🇺🇸 68.10.53.87

🇺🇸 65.49.1.103

🇪🇸 62.82.237.213