JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.241.68.96

152.241.68.96 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 5%: ?

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS26599
Hostname(s)	152-241-68-96.user.vivozap.com.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Jaboatao dos Guararapes, Pernambuco

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.241.68.96

Whois 152.241.68.96

IP Abuse Reports for 152.241.68.96:

This IP address has been reported a total of 4 times from 4 distinct sources. 152.241.68.96 was first reported on April 4th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-20 08:35:21 (5 hours ago)	(mod_security) mod_security (id:210350) triggered by 152.241.68.96 (152-241-68-96.user.vivozap.com.b ... show more (mod_security) mod_security (id:210350) triggered by 152.241.68.96 (152-241-68-96.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 04:35:17.989774 2026] [security2:error] [pid 25990:tid 25990] [client 152.241.68.96:55213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|natural-history-conservation.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "natural-history-conservation.com"] [uri "/plesiosaur.htm"] [unique_id "aq-axX4ywJkFd4CrfpUK-QAAAAI"], referer: https://en.wikipedia.org/wiki/Plesiosaur show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-04-05 05:28:27 (5 months ago)	[SunApr0507:28:20.3762902026][security2:error][pid769016:tid769023][client152.241.68.96:0]ModSecurit ... show more [SunApr0507:28:20.3762902026][security2:error][pid769016:tid769023][client152.241.68.96:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"200\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"benvenutialfood.biz\"][uri\"/xmlrpc.php\"][unique_id\"adHy9EA4WnFqs04NLUD65AAAAIM\"] show less	Hacking Web App Attack
🇫🇷 Kenshin869	2026-04-04 23:06:50 (5 months ago)	Wordpress unauthorized access attempt	Brute-Force
🇪🇸 masterguru	2026-04-04 10:58:43 (5 months ago)	(xmlrpc) Failed xmlrpc access from 152.241.68.96 (BR/Brazil/152-241-68-96.user.vivozap.com.br): 5 in ... show more (xmlrpc) Failed xmlrpc access from 152.241.68.96 (BR/Brazil/152-241-68-96.user.vivozap.com.br): 5 in the last 3600 secs (0-123) show less	Hacking

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 209.20.187.210

🇧🇷 201.63.138.70

🇸🇪 193.189.100.203

🇨🇳 175.178.184.121

🇨🇴 130.250.228.140

🇨🇳 112.6.127.244

🇷🇺 95.188.91.101

🇺🇸 70.184.126.57

🇹🇼 35.221.194.126

🇬🇧 35.203.211.226

🇺🇸 34.153.17.222

🇳🇱 34.13.139.9

🇺🇸 20.121.140.161

🇨🇳 218.91.32.241

🇨🇴 190.85.11.150

🇬🇧 157.245.34.56

🇺🇸 146.190.159.228

🇺🇸 107.150.105.153

🇱🇧 77.246.68.198

🇺🇸 45.130.83.75