This IP address has been reported a total of
60
times from
26 distinct
sources.
81.200.24.99 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[TueSep0101:42:43.6332772026][security2:error][pid716541:tid716664][client81.200.24.99:0]ModSecurity ...
show more[TueSep0101:42:43.6332772026][security2:error][pid716541:tid716664][client81.200.24.99:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"r102.ch\"][uri\"/plugins/system/jce/jce.xml\"][unique_id\"apYRc8W_zdrbnZHIoAvEvQAAAAQ\"]
show less
[MonAug3118:41:45.7329372026][security2:error][pid2943346:tid2943448][client81.200.24.99:0]ModSecuri ...
show more[MonAug3118:41:45.7329372026][security2:error][pid2943346:tid2943448][client81.200.24.99:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ponzellini.ch\"][uri\"/plugins/system/jce/jce.xml\"][unique_id\"apWuyXQZ75cTrH4EghVFEwAAAQA\"]
show less
Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Windows N ...
show moreRequests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2763.74 Safari/537.36')
show less
[SunAug3008:39:16.5951982026][security2:error][pid1198518:tid1198706][client81.200.24.99:0]ModSecuri ...
show more[SunAug3008:39:16.5951982026][security2:error][pid1198518:tid1198706][client81.200.24.99:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"4-server.com\"][uri\"/media/sourcerer/js/popup.js\"][unique_id\"apPQFEW-rlLvR8TRE_Jq4QAAABY\"]
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27.
show less
[FriAug2813:07:15.9323232026][security2:error][pid1106019:tid1106284][client81.200.24.99:0]ModSecuri ...
show more[FriAug2813:07:15.9323232026][security2:error][pid1106019:tid1106284][client81.200.24.99:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hostingedominio.net\"][uri\"/plugins/system/jce/jce.xml\"][unique_id\"apFr43tv_90I77ZjORBezgAAAQY\"]
show less
Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Macintosh ...
show moreRequests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2901.34 Safari/537.36')
show less
Web App Attack
Exploited Host
Showing 1 to
15
of 60 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩