This IP address has been reported a total of
10
times from
10 distinct
sources.
3.96.141.63 was first reported on
March 10th 2026 , and the most recent report was
3 days ago .
In the last 60 days, the top reporter locations were:
Netherlands
with 3
reports;
Germany
with 2
reports;
Australia
with 1
report.
The most common categories in these recent reports were:
Web App Attack
5
times;
Brute-Force
4
times;
Bad Web Bot
3
times;
Hacking
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ง๐ช
cmbplf
2026-09-21 19:10:54
(3 days ago)
5.919 requests with url.path *.git/*
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-09-21 17:15:55
(3 days ago)
Excessive 404/403 errors
Brute-Force
๐ฉ๐ช
Blexyel
2026-09-21 02:24:49
(4 days ago)
3.96.141.63 - - [21/Sep/2026:04:24:49 +0200] "GET /.git/info/ HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Wi ...
show more
3.96.141.63 - - [21/Sep/2026:04:24:49 +0200] "GET /.git/info/ HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-20 22:10:26
(4 days ago)
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 3.96.141.63 - - [21/Sep/2026:00:10:25 +0200] "GET /.git/HEAD HTTP/1.1" 404 7859 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
thedreamer.nl
2026-09-20 21:29:23
(4 days ago)
3.96.141.63 - - [20/Sep/2026:23:27:24 +0200] "GET /.git/HEAD HTTP/1.1" 200 23 "-" "Mozilla/5.0 (Wind ...
show more
3.96.141.63 - - [20/Sep/2026:23:27:24 +0200] "GET /.git/HEAD HTTP/1.1" 200 23 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" "CA" "Montreal" "45.50750" "-73.58870"
3.96.141.63 - - [20/Sep/2026:23:27:25 +0200] "GET /.git/ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" "CA" "Montreal" "45.50750" "-73.58870"
3.96.141.63 - - [20/Sep/2026:23:27:25 +0200] "GET /.git/refs/ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" "CA" "Montreal" "45.50750" "-73.58870"
3.96.141.63 - - [20/Sep/2026:23:27:25 +0200] "GET /.git/refs/heads/ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" "CA" "Montreal" "45.50750" "-73.58870"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ramazan
2026-09-20 21:20:25
(4 days ago)
Fail2Ban: nginx-4xx | Failures: 10 | Log: /.git/ /.git/logs/ /.git/logs/refs/ /.git/logs/refs/heads/ ...
show more
Fail2Ban: nginx-4xx | Failures: 10 | Log: /.git/ /.git/logs/ /.git/logs/refs/ /.git/logs/refs/heads/ /.git/logs/refs/remotes/
show less
Web App Attack
Hacking
๐ฆ๐บ
aranguren.org
2026-09-20 19:20:32
(4 days ago)
3.96.141.63 - - [21/Sep/2026:05:20:29 +1000] "GET /.git/info/ HTTP/1.1" 200 932 "-" "Mozilla/5.0 (Wi ...
show more
3.96.141.63 - - [21/Sep/2026:05:20:29 +1000] "GET /.git/info/ HTTP/1.1" 200 932 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
3.96.141.63 - - [21/Sep/2026:05:20:31 +1000] "GET /.git/info/ HTTP/1.1" 200 932 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
3.96.141.63 - - [21/Sep/2026:05:20:32 +1000] "GET /.git/config HTTP/1.1" 200 263 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
...
show less
Web App Attack
๐ฉ๐ช
wsyq
2026-03-11 00:10:08
(6 months ago)
Fail2Ban - \[NGINX\]40x-Forcing to access a restricted resource
...
Bad Web Bot
Web App Attack
๐ฉ๐ช
seifert
2026-03-10 23:18:17
(6 months ago)
This IP was detected by CrowdSec triggering mailcow/netfilter-ban
Brute-Force
๐ฌ๐ง
poundawebsiteltd
2026-03-10 23:00:35
(6 months ago)
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 3.96.141.63 - - [10/Mar/2026:23: ...
show more
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 3.96.141.63 - - [10/Mar/2026:23:00:32 +0000] POST / HTTP/1.1 403 235 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Web App Attack
Showing 1 to
10
of 10 reports