82.24.212.101

bad-bot hacking for vulnerable links.

82.24.212.101 - - [10/Sep/2026:19:05:36 +0200] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini HTTP/1.1" 404 5556 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/ ... show more 82.24.212.101 - - [10/Sep/2026:19:05:36 +0200] "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini HTTP/1.1" 404 5556 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" ... show less

Forbidden access for mozilla/5.0 (compatible; googlebot/2.1; +http://www.google.com/bot.html)

| XSS (Cross Site Scripting) attempt.

82.24.212.101 - - [17/Mar/2026:07:52:32 +0200] "GET /.env.backup HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" ...

Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -38.432 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Sa

(mod_security) mod_security (id:210492) triggered by 82.24.212.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 09:56:46.763046 2026] [security2:error] [pid 16719:tid 16791] [client 82.24.212.101:51445] M ... show more (mod_security) mod_security (id:210492) triggered by 82.24.212.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 09:56:46.763046 2026] [security2:error] [pid 16719:tid 16791] [client 82.24.212.101:51445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.staging.kettlehill.com"] [uri "/.env.bak"] [unique_id "aX9prtCv_m7wviPTH3EsuAAAAQ8"] show less

(mod_security) mod_security (id:210492) triggered by 82.24.212.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 02:56:03.161759 2025] [security2:error] [pid 32397:tid 32397] [client 82.24.212.101:54035] M ... show more (mod_security) mod_security (id:210492) triggered by 82.24.212.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 02:56:03.161759 2025] [security2:error] [pid 32397:tid 32397] [client 82.24.212.101:54035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/.env.backup"] [unique_id "aRQ9kyAUqGMjP4YwmNO8cgAAABo"] show less

(mod_security) mod_security (id:210730) triggered by 82.24.212.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 10:41:22.513606 2025] [security2:error] [pid 12475:tid 12479] [client 82.24.212.101:45093] M ... show more (mod_security) mod_security (id:210730) triggered by 82.24.212.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 10:41:22.513606 2025] [security2:error] [pid 12475:tid 12479] [client 82.24.212.101:45093] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kettlehill.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.com"] [uri "/.db"] [unique_id "aN09kmCKjmgjI9kURFJ-ywAAAUA"] show less