Total reports
6 from
6 distinct
reporters
First reported
October 17th 2026
Most recent report
3 weeks ago
Last 60 days
Top reporter locations
🇵🇱
Poland
2
🇨🇭
Switzerland
1
🇨🇿
Czechia
1
Most common categories
Web App Attack
5
Hacking
3
Port Scan
2
Bad Web Bot
1
SQL Injection
1
Old reports
The most recent abuse report for this IP address is from
3 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
copestack
2026-10-19 01:30:24
UTC ·
(3 weeks ago)
Honeypot hit on ov-9acb4e (fail2ban jail: roridula-feed)
Port Scan
🇩🇪
tg_de
2026-10-18 05:46:05
UTC ·
(3 weeks ago)
277 attempts since 18.10.2026 07:44:56 CEST - last search for: /
Web App Attack
🇵🇱
arcy
2026-10-18 02:11:15
UTC ·
(3 weeks ago)
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files. 11 matching log events between 2026-10-18T02:11:13Z and 02:11:15Z (UTC). Sample requests: GET /.git/config -> 40 ...
show more
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files. 11 matching log events between 2026-10-18T02:11:13Z and 02:11:15Z (UTC). Sample requests: GET /.git/config -> 404; GET /.env -> 404; GET /.env.local -> 404; GET /.env.production -> 404; GET /.env.staging -> 404; GET /.env.development -> 404; GET /.env.test -> 404; GET /.env.remote -> 404; GET /.env.bak -> 404; GET /.env.backup -> 404; GET /.env.save -> 404
show less
Port Scan
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-18 00:50:07
UTC ·
(3 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn-pl.budyn.wtf | URI: / | UA: Mozilla/5.0 (W ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn-pl.budyn.wtf | URI: / | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
2026-10-17 23:50:10
UTC ·
(3 weeks ago)
| [Dangerous/India] Aggressive IP 34.93.55.55 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-10-17 23:31:07
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.93.55.55 (55.55.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:30:59.474213 2026] [security2:error] [pid 27393:tid 2739 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.55.55 (55.55.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:30:59.474213 2026] [security2:error] [pid 27393:tid 27393] [client 34.93.55.55:44494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vplow.com"] [uri "/.git/config"] [unique_id "atQFMyVAL8aHIyAAdikl9gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
