Total reports
6 from
6 distinct
reporters
First reported
November 7th 2026
Most recent report
11 hours ago
Last 60 days
Top reporter locations
🇳🇱
Netherlands
3
🇺🇸
United States of America
2
🇬🇷
Greece
1
Most common categories
Bad Web Bot
2
Web App Attack
2
Exploited Host
1
SSH
1
Email Spam
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇳🇱
homeshowdomain.nl
2026-11-08 22:59:37
UTC ·
(11 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-07.
Web App Attack
SSH
Hacking
🇳🇱
soverin
2026-11-08 11:05:53
UTC ·
(23 hours ago)
Network scan on port 443
Email Spam
🇺🇸
SX Communications
2026-11-08 09:52:20
UTC ·
(1 day ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 172.232.15.239: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user hos ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 172.232.15.239: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇳🇱
tr1n
2026-11-07 23:22:22
UTC ·
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | ASN: 63949 (Akamai Connected Cloud) | Protocol: HTTP/2 (GET) | Endpoint: / | Timestamp: 2026-11-07T23:22:22Z | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | ASN: 63949 (Akamai Connected Cloud) | Protocol: HTTP/2 (GET) | Endpoint: / | Timestamp: 2026-11-07T23:22:22Z | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
gerensat
2026-11-07 15:47:00
UTC ·
(1 day ago)
2026-11-07 12:47:00 | / | [] | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Web App Attack
🇬🇷
setupgr
2026-11-07 13:57:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:11000011) triggered by 172.232.15.239 (US/United States/Illinois/Chicago/-/[AS63949 Akamai Connected Cloud]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:5 ...
show more
(mod_security) mod_security (id:11000011) triggered by 172.232.15.239 (US/United States/Illinois/Chicago/-/[AS63949 Akamai Connected Cloud]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:57:56.669098 2026] [security2:error] [pid 11685:tid 11781] [remote 172.232.15.239:39526] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "linodeusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 172-232-15-239.ip.linodeusercontent.com"] [severity "CRITICAL"] [hostname "grafeioteletonkaragiannis.gr"] [uri "/"] [unique_id "au8uZIAUSNHO7-VsrIN-3wABjRY"]
show less
Port Scan