Total reports
8 from
5 distinct
reporters
First reported
November 2nd 2026
Most recent report
3 days ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
3
🇨🇿
Czechia
2
🇧🇾
Belarus
1
Most common categories
Web App Attack
8
Brute-Force
6
Bad Web Bot
4
Hacking
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇧🇾
lns.bz
2026-11-03 19:51:32
UTC ·
(3 days ago)
.env scanning [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 13:07:08
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.80.64.241 (241.64.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:07:04.984630 2026] [security2:error] [pid 825:tid 825] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.64.241 (241.64.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:07:04.984630 2026] [security2:error] [pid 825:tid 825] [client 34.80.64.241:46176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andiamocomputers.com"] [uri "/.git/config"] [unique_id "aunceLYmQA64l6-QABtYxgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 02:55:45
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.80.64.241 (241.64.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:55:39.278461 2026] [security2:error] [pid 7904:tid 790 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.64.241 (241.64.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:55:39.278461 2026] [security2:error] [pid 7904:tid 7904] [client 34.80.64.241:44040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "battlestem.com"] [uri "/.git/config"] [unique_id "aulNK4U14Y6Dts_u2gmnLAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-02 17:11:09
UTC ·
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇷🇺
Deynekin.com
2026-11-02 14:12:11
UTC ·
(5 days ago)
Automated fail2ban report from server 176.99.5.35.
Attack type: web application vulnerability scanning/exploitation attempts (jails: nginx-attack-scan).
Observed: 2026-11-02T17:12:11+03:00.
Detections: 1 ban event(s), 5 failed attempts.
Ban duration: ...
show more
Automated fail2ban report from server 176.99.5.35.
Attack type: web application vulnerability scanning/exploitation attempts (jails: nginx-attack-scan).
Observed: 2026-11-02T17:12:11+03:00.
Detections: 1 ban event(s), 5 failed attempts.
Ban duration: 1d.
Sample requests/indicators:
GET /.git/config -> 404
GET /.env -> 404
GET /.env.local -> 404
GET /.env.production -> 404
No personal data included.
--
Reported via Fail2Ban_AbuseIPDB Monitor: https://github.com/paulmann/Fail2Ban_AbuseIPDB
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-02 10:20:06
UTC ·
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 09:28:58
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.80.64.241 (241.64.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 04:28:55.095575 2026] [security2:error] [pid 17732:tid 17 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.64.241 (241.64.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 04:28:55.095575 2026] [security2:error] [pid 17732:tid 17732] [client 34.80.64.241:39862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accommodation-perthairport.com"] [uri "/.git/config"] [unique_id "auhX19LreH_-zN8weyAEsgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-02 09:26:04
UTC ·
(5 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
