2.31.155.11

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
242 reports
133 reporters · latest 1 hour ago
ISP
Hetzner Online GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS24940
Hostname(s)
scanner1.gitlantern.com
Domain Name
hetzner.com
Country
🇩🇪 Germany
City
Nuremberg, Bavaria
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
242 from 133 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 55 🇵🇱 Poland 50 🇩🇪 Germany 39
Most common categories Web App Attack 208 Bad Web Bot 94 Hacking 60 Brute-Force 42 Port Scan 11
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 e.fierstra
ModSecurity hits exceeded
Bad Web Bot Web App Attack
🇨🇦 Blinker73
2.31.155.11 - - [09/Nov/2026:06:31:23 -0500] "GET /.env HTTP/1.1" 403 118 "-" "leakfinder-scanner/0.1 (+contact: [email protected])"
Bad Web Bot Web App Attack
🇵🇱 Budyn
Hacking Web App Attack
🇵🇱 Budyn
Hacking Web App Attack
🇵🇱 Budyn
Hacking Web App Attack
🇬🇧 andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
🇳🇱 Alt255
[cb-03al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail apache-scanner. Example: 2.31.155.11 - - [09/Nov/2026:02:20:48 +0100] "GET /.git/HEAD HTTP/1.1" 301 5815 "-" "leakfinder-scanner/0.1 (+contact: [email protected])" ...
Bad Web Bot Web App Attack
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host Web App Attack
🇵🇱 Budyn
Hacking Web App Attack
Anonymous
GET /.vscode/sftp.json | rule: secret-file | ua: leakfinder-scanner/0.1 (+contact: [eposta]) | net: Hetzner Online GmbH AS24940
Hacking Web App Attack
🇫🇷 SpaceHost-Server
Brute-Force Web App Attack
Anonymous
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=GB; ASN=2856 British Telecommunications PLC
Hacking
🇬🇧 KTSTechnology
Web vulnerability scanning detected by our ISP firewall
Web App Attack
🇺🇸 stdcout9090
AetherGuard WAF blocked: Matched phrase "/.git/" at REQUEST_URI. Target: client.aetherguard.xyz/.git/HEAD (6 attempts logged from this IP) Payload / matched WAF rule data: User-Agent: leakfinder-scanner/0.1 (+contact: [email protected])
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 45.148.10.151
🇺🇸 216.25.89.151
🇮🇩 202.158.36.50
🇺🇸 192.185.73.153
🇨🇴 181.53.13.207
🇺🇸 162.216.150.22
🇻🇳 113.161.39.122
🇳🇱 109.160.32.113
🇵🇰 103.186.77.141
🇳🇵 103.166.101.178
🇬🇧 87.236.176.246
🇺🇸 35.89.172.20
🇦🇷 179.238.95.82
🇵🇹 176.223.44.80
🇵🇱 172.64.198.48
🇿🇦 102.133.162.110
feedback