JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 24.212.182.134

24.212.182.134 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	TekSavvy Solutions Inc.
Usage Type	Fixed Line ISP
ASN	AS5645
Hostname(s)	24-212-182-134.cable.teksavvy.com
Domain Name	teksavvy.com
Country	🇨🇦 Canada
City	London, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 24.212.182.134

Whois 24.212.182.134

IP Abuse Reports for 24.212.182.134:

This IP address has been reported a total of 27 times from 23 distinct sources. 24.212.182.134 was first reported on October 14th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Kriengkrai Chaimin	2026-10-22 09:36:25 (18 hours ago)	24.212.182.134 - - [22/Oct/2026:16:36:25 +0700] "GET /.env HTTP/1.1" 404 1142 "-" "Mozilla/5.0 (X11; ... show more 24.212.182.134 - - [22/Oct/2026:16:36:25 +0700] "GET /.env HTTP/1.1" 404 1142 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "-" ... show less	Bad Web Bot Web App Attack
🇺🇸 pixiekat	2026-10-22 03:12:39 (1 day ago)	Banned by fail2ban (apache-modsecurity, 3 hits) [msg "AndroxGh0st-style .env hunt"]	Web App Attack
Anonymous	2026-10-21 20:51:36 (1 day ago)	24.212.182.134 - - [21/Oct/2026:20:51:35 +0000] "GET /.env HTTP/1.1" 302 5557 "-" "Mozilla/5.0 (X11; ... show more 24.212.182.134 - - [21/Oct/2026:20:51:35 +0000] "GET /.env HTTP/1.1" 302 5557 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" ... show less	Bad Web Bot Web App Attack
🇵🇱 nfsec.pl	2026-10-21 19:31:30 (1 day ago)	24.212.182.134 - - [21/Oct/2026:19:31:25 +0000] "GET /.env HTTP/1.1" 403 6573 "-" "Mozilla/5.0 (X11; ... show more 24.212.182.134 - - [21/Oct/2026:19:31:25 +0000] "GET /.env HTTP/1.1" 403 6573 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" 24.212.182.134 - - [21/Oct/2026:19:31:26 +0000] "GET /.env.local HTTP/1.1" 403 6575 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" 24.212.182.134 - - [21/Oct/2026:19:31:27 +0000] "GET /.env.dev HTTP/1.1" 403 6574 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" 24.212.182.134 - - [21/Oct/2026:19:31:28 +0000] "GET /.env.production HTTP/1.1" 403 6573 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" 24.212.182.134 - - [21/Oct/2026:19:31:29 +0000] "GET /.env.bak HTTP/1.1" 403 6575 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" ... show less	Web App Attack Exploited Host
🇺🇸 EvilTurkey	2026-10-21 13:00:59 (1 day ago)	Web app attack against financial institution website.	Web App Attack Hacking
Anonymous	2026-10-21 03:39:59 (2 days ago)	harvesting of secret and configuration files (.env, .git/config, .aws/credentials, SSH keys); e.g. / ... show more harvesting of secret and configuration files (.env, .git/config, .aws/credentials, SSH keys); e.g. /.env.local, /.env, /.env.dev. Requests blocked by our WAF (automated report). show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-10-20 11:37:39 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 24.212.182.134 (24-212-182-134.cable.teksavvy.c ... show more (mod_security) mod_security (id:210492) triggered by 24.212.182.134 (24-212-182-134.cable.teksavvy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 07:37:34.085824 2026] [security2:error] [pid 21658:tid 21658] [client 24.212.182.134:34120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.scoutinsignia.com"] [uri "/.env"] [unique_id "atdSfhQeOyyg4IFSC3dP-gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2026-10-20 11:13:09 (2 days ago)	vulnerability scan	Web App Attack
🇳🇱 Roderic	2026-10-20 03:54:37 (2 days ago)	Insights: 17 probe requests within 24 hours on 1 site, e.g. /.env (no normal page views)	Web App Attack
🇬🇧 Marten Mark	2026-10-20 03:23:33 (3 days ago)	24.212.182.134 - - [20/Oct/2026:03:23:31 +0000] "GET /.aws/credentials HTTP/2.0" 404 23110 "-" "Mozi ... show more 24.212.182.134 - - [20/Oct/2026:03:23:31 +0000] "GET /.aws/credentials HTTP/2.0" 404 23110 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" ... show less	Web App Attack Bad Web Bot
🇬🇧 WebNiraj	2026-10-19 19:24:10 (3 days ago)	(mod_security) mod_security (id:949110) triggered by 24.212.182.134 (CA/Canada/24-212-182-134.cable. ... show more (mod_security) mod_security (id:949110) triggered by 24.212.182.134 (CA/Canada/24-212-182-134.cable.teksavvy.com): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇫🇷 dynamix	2026-10-19 06:53:38 (3 days ago)	Multiple WAF Violations	Web App Attack
🇫🇮 Erpelstolz	2026-10-19 03:44:30 (4 days ago)	external host: 24.212.182.134 - - [19/Oct/2026:05:44:29 +0200] "GET /.git/config HTTP/1.1" 403 6139 ... show more external host: 24.212.182.134 - - [19/Oct/2026:05:44:29 +0200] "GET /.git/config HTTP/1.1" 403 6139 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" CF-Ray:- CF-IP:- show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-19 01:00:32 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 24.212.182.134 (24-212-182-134.cable.teksavvy.c ... show more (mod_security) mod_security (id:210492) triggered by 24.212.182.134 (24-212-182-134.cable.teksavvy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 21:00:24.770425 2026] [security2:error] [pid 32732:tid 32732] [client 24.212.182.134:58370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apworldhistoryexamprep.com"] [uri "/.env"] [unique_id "atVrqCSd4X1770Jjtsxr6AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-10-18 15:31:32 (4 days ago)	Accessed trap at '/.env'	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.136.15.81

🇺🇸 202.8.43.182

🇳🇱 185.136.15.82

🇺🇸 184.105.247.244

🇳🇱 176.65.149.198

🇱🇰 112.135.61.253

🇵🇱 91.236.172.107

🇫🇷 91.231.89.131

🇫🇷 91.231.89.73

🇬🇧 86.38.187.10

🇫🇷 85.217.140.11

🇺🇸 57.141.0.54

🇨🇦 54.39.0.52

🇺🇸 51.81.111.13

🇦🇷 45.173.54.4

🇺🇸 44.228.141.231

🇨🇦 24.36.201.223

🇬🇧 198.244.168.204

🇧🇷 191.243.7.16

🇺🇸 188.213.202.52