Total reports
9 from
8 distinct
reporters
First reported
November 12th 2026
Most recent report
8 minutes ago
Last 60 days
Top reporter locations
🇩🇪
Germany
2
🇫🇮
Finland
2
🇨🇭
Switzerland
1
Most common categories
Web App Attack
6
Brute-Force
4
Port Scan
1
Hacking
1
Bad Web Bot
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-11-12 13:24:31
UTC ·
(8 minutes ago)
Scan for .env Files at 2026-11-12T13:24:31+00:00
Web App Attack
2026-11-12 13:22:32
UTC ·
(10 minutes ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
ghostwarriors
2026-11-12 13:20:10
UTC ·
(13 minutes ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
2026-11-12 12:59:36
UTC ·
(33 minutes ago)
Scanner hitting /.git/config on grafana.picsou.cloud (GOOGL-2) — aaguard
Brute-Force
Port Scan
🇩🇪
throny
2026-11-12 12:54:38
UTC ·
(38 minutes ago)
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 4 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0 ...
show more
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 4 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa
Requested, e.g.:
- grafana.[REDACTED]/
show less
Bad Web Bot
2026-11-12 12:52:35
UTC ·
(40 minutes ago)
Scan for .env Files at 2026-11-12T12:52:35+00:00
Web App Attack
🇨🇭
zynex
2026-11-12 12:48:13
UTC ·
(45 minutes ago)
CrowdSec crowdsecurity/http-sensitive-files
Web App Attack
🇪🇸
Francisco Vallejo
2026-11-12 12:40:35
UTC ·
(52 minutes ago)
[Thu Nov 12 13:40:33.237524 2026] [authz_core:error] [pid 431969:tid 432032] [client 34.17.206.71:43672] AH01630: client denied by server configuration: proxy:https://localhost:3000/
[Thu Nov 12 13:40:33.606387 2026] [authz_core:error] [pid 431969:ti ...
show more
[Thu Nov 12 13:40:33.237524 2026] [authz_core:error] [pid 431969:tid 432032] [client 34.17.206.71:43672] AH01630: client denied by server configuration: proxy:https://localhost:3000/
[Thu Nov 12 13:40:33.606387 2026] [authz_core:error] [pid 431969:tid 432025] [client 34.17.206.71:43672] AH01630: client denied by server configuration: proxy:https://localhost:3000/
[Thu Nov 12 13:40:33.806687 2026] [authz_core:error] [pid 431969:tid 432038] [client 34.17.206.71:43672] AH01630: client denied by server configuration: proxy:https://localhost:3000/
[Thu Nov 12 13:40:34.279550 2026] [authz_core:error] [pid 431969:tid 432026] [client 34.17.206.71:43672] AH01630: client denied by server configuration: proxy:https://localhost:3000/
[Thu Nov 12 13:40:34.902827 2026] [authz_core:error] [pid 431969:tid 432029] [client 34.17.206.71:43672] AH01630: client denied by server configuration: proxy:https://localhost:3000/.git/config
...
show less
Brute-Force
SSH
🇵🇱
Budyn
2026-11-12 12:25:48
UTC ·
(1 hour ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: grafana.astropot.website | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: grafana.astropot.website | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
