This IP address has been reported a total of
16
times from
6 distinct
sources.
109.252.156.24 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-23 00:05:14,910 fail2ban.actions [1403250]: NOTICE [apache-auth] Ban 109.252.156.24
...
show more2026-06-23 00:05:14,910 fail2ban.actions [1403250]: NOTICE [apache-auth] Ban 109.252.156.24
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
2026-06-14 00:07:11,919 fail2ban.actions [203556]: NOTICE [apache-botsearch] Ban 109.252.156 ...
show more2026-06-14 00:07:11,919 fail2ban.actions [203556]: NOTICE [apache-botsearch] Ban 109.252.156.24
2026-06-14 00:07:11,919 fail2ban.actions [203556]: NOTICE [apache-botsearch] Ban 109.252.156.24
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
2026-05-31 00:07:48,675 fail2ban.actions [264721]: NOTICE [apache-auth] Ban 109.252.156.24
. ...
show more2026-05-31 00:07:48,675 fail2ban.actions [264721]: NOTICE [apache-auth] Ban 109.252.156.24
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
2026-05-31 00:07:48,675 fail2ban.actions [264721]: NOTICE [apache-auth] Ban 109.252.156.24
. ...
show more2026-05-31 00:07:48,675 fail2ban.actions [264721]: NOTICE [apache-auth] Ban 109.252.156.24
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
Malformed or malicious web request
109.252.156.24 - - [23/May/2026:18:54:38 +0200] "POST /livewire/u ...
show moreMalformed or malicious web request
109.252.156.24 - - [23/May/2026:18:54:38 +0200] "POST /livewire/update HTTP/1.1" 404 4187 "https://account.<REDACTED>/signup" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2775.46 Safari/537.36"
show less
IM360 WAF: Dangerous PHP functions in HTTP headers MV:https://atraisfoto.lv/wp-content/plugins/wp-fi ...
show moreIM360 WAF: Dangerous PHP functions in HTTP headers MV:https://atraisfoto.lv/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&...
show less
2026-05-22 04:55:44,978 fail2ban.actions [1062]: NOTICE [apache-auth] Ban 109.252.156.24
202 ...
show more2026-05-22 04:55:44,978 fail2ban.actions [1062]: NOTICE [apache-auth] Ban 109.252.156.24
2026-05-22 04:55:44,993 fail2ban.actions [1062]: NOTICE [error-bots] Ban 109.252.156.24
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
[TueMay1920:53:31.7366452026][security2:error][pid2567296:tid2567321][client109.252.156.24:0]ModSecu ...
show more[TueMay1920:53:31.7366452026][security2:error][pid2567296:tid2567321][client109.252.156.24:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"motogiro.com\"][uri\"/\"][unique_id\"agyxq4P6ZKf1URU15oJLsgAAABc\"]
show less
[MonMay1803:35:45.4135372026][security2:error][pid1452962:tid1452987][client109.252.156.24:0]ModSecu ...
show more[MonMay1803:35:45.4135372026][security2:error][pid1452962:tid1452987][client109.252.156.24:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"motogiro.com\"][uri\"/bitrix/tools/spread.php\"][unique_id\"agps8Y0WadOVRnm-qSYofwAAAJc\"]
show less
Hacking
Web App Attack
Showing 1 to
15
of 16 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩