This IP address has been reported a total of
25
times from
23 distinct
sources.
116.96.47.19 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 5
reports;
Netherlands
with 2
reports;
Argentina
with 1
report.
The most common categories in these recent reports were:
Web App Attack
9
times;
Brute-Force
5
times;
DDoS Attack
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
HONEYPOT HIT --> Fail2ban time=1792011878 log=2026-10-14T22:04:38+01:00 ip=116.96.47.19 host=as21066 ...
show moreHONEYPOT HIT --> Fail2ban time=1792011878 log=2026-10-14T22:04:38+01:00 ip=116.96.47.19 host=as210667.net method=POST uri="/xmlrpc.php" status=404 ua="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36" ref="-" rid=280b4d98d2b9e2c105ba0abe4aea90ee
show less
[SunOct0406:56:53.3331872026][security2:error][pid3246081:tid3246101][client116.96.47.19:0]ModSecuri ...
show more[SunOct0406:56:53.3331872026][security2:error][pid3246081:tid3246101][client116.96.47.19:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"e20ti.ch\"][uri\"/xmlrpc.php\"][unique_id\"asHclbPkcuv6xAp0d869jgAAANI\"]
show less
[11:34] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ...
show more[11:34] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12
show less