Total reports
7 from
7 distinct
reporters
First reported
November 2nd 2026
Most recent report
3 days ago
Last 60 days
Top reporter locations
🇳🇱
Netherlands
2
🇮🇱
Israel
1
🇳🇴
Norway
1
Most common categories
Web App Attack
7
Bad Web Bot
3
Brute-Force
3
Hacking
2
SSH
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇱
spd.co.il
2026-11-04 02:01:56
UTC ·
(3 days ago)
Web application attack detected
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-03 22:59:10
UTC ·
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-02.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-03 00:34:11
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 100.24.16.72 (ec2-100-24-16-72.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:34:03.940520 2026] [security2:error] [pid 30934:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 100.24.16.72 (ec2-100-24-16-72.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:34:03.940520 2026] [security2:error] [pid 30934:tid 30934] [client 100.24.16.72:41036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "34.gisur.com"] [uri "/.git/config"] [unique_id "aukr-2ZLb12OrC5hCboeMAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
Deynekin.com
2026-11-02 17:36:35
UTC ·
(4 days ago)
Automated fail2ban report from server 176.99.5.35.
Attack type: web application vulnerability scanning/exploitation attempts (jails: nginx-attack-scan).
Observed: 2026-11-02T20:36:35+03:00.
Detections: 1 ban event(s), 5 failed attempts.
Ban duration: ...
show more
Automated fail2ban report from server 176.99.5.35.
Attack type: web application vulnerability scanning/exploitation attempts (jails: nginx-attack-scan).
Observed: 2026-11-02T20:36:35+03:00.
Detections: 1 ban event(s), 5 failed attempts.
Ban duration: 1d.
Sample requests/indicators:
GET /.git/config -> 404
GET /.env -> 404
GET /.env.local -> 404
GET /.env.production -> 404
No personal data included.
--
Reported via Fail2Ban_AbuseIPDB Monitor: https://github.com/paulmann/Fail2Ban_AbuseIPDB
show less
Bad Web Bot
Web App Attack
🇳🇿
Tripwire
2026-11-02 03:15:46
UTC ·
(5 days ago)
Scanning for exploits - /.env
Web App Attack
🇳🇴
doofy
2026-11-02 02:00:41
UTC ·
(5 days ago)
[Mon Nov 02 03:00:40.648293 2026] [authz_core:error] [pid 78323:tid 78355] [client 100.24.16.72:47254] AH01630: client denied by server configuration: /www/hekser.net/.git
[Mon Nov 02 03:00:40.893097 2026] [authz_core:error] [pid 78323:tid 78365] [cl ...
show more
[Mon Nov 02 03:00:40.648293 2026] [authz_core:error] [pid 78323:tid 78355] [client 100.24.16.72:47254] AH01630: client denied by server configuration: /www/hekser.net/.git
[Mon Nov 02 03:00:40.893097 2026] [authz_core:error] [pid 78323:tid 78365] [client 100.24.16.72:47254] AH01630: client denied by server configuration: /www/hekser.net/.env
[Mon Nov 02 03:00:41.000304 2026] [authz_core:error] [pid 78323:tid 78360] [client 100.24.16.72:47254] AH01630: client denied by server configuration: /www/hekser.net/.env.local
[Mon Nov 02 03:00:41.103720 2026] [authz_core:error] [pid 78323:tid 78353] [client 100.24.16.72:47254] AH01630: client denied by server configuration: /www/hekser.net/.env.production
[Mon Nov 02 03:00:41.206055 2026] [authz_core:error] [pid 78323:tid 78356] [client 100.24.16.72:47254] AH01630: client denied by server configuration: /www/hekser.net/.env.staging
...
show less
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-11-02 00:21:45
UTC ·
(5 days ago)
20 attempts against mh_ha-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
