This IP address has been reported a total of
11
times from
11 distinct
sources.
188.253.220.61 was first reported on
June 26th 2025 , and the most recent report was
1 day ago Germany
with 1
report;
Serbia
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
DDoS Attack
3
times;
Bad Web Bot
2
times;
Web App Attack
2
times;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-23 16:36:41
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 188.253.220.61 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 188.253.220.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 12:36:37.534887 2026] [security2:error] [pid 19631:tid 19742] [client 188.253.220.61:13188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||super-8mm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "super-8mm.com"] [uri "/"] [unique_id "atuNFfCqo8H7WfG4AEm5YwAAAVE"], referer: https://myalexlogic.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇸
pavel Karpenko
2026-10-12 17:27:03
(1 week ago)
188.253.220.61 - - [12/Oct/2026:20:27:03 +0300] "GET /transfer/?code=US&company=Hostigger+INC.&compa ...
show more
188.253.220.61 - - [12/Oct/2026:20:27:03 +0300] "GET /transfer/?code=US&company=Hostigger+INC.&company_country=US&counterparty=Geo+Teknoloji+A.S&counterparty_country=TR&country=US&lang=ru&months=12&scope=ripe_from&share=b49cfc94eb3eaf12&view=pair HTTP/2.0" 302 0 "https://ultralir.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" client_port=2814 server_port=443 rt=0.009 urt=0.008 transfer_entry=- server_addr=195.133.18.6 epoch=1791826023.759
show less
DDoS Attack
🇩🇪
LRob
2026-10-01 16:56:37
(3 weeks ago)
Shop search flood (L7 DDoS) | path: /111-bons-plan-vtt | query: order=product.name.asc&productListVi ...
show more
Shop search flood (L7 DDoS) | path: /111-bons-plan-vtt | query: order=product.name.asc&productListView=grid&q=Famille-Overvolt-Pulsium-Contessa+Active | src_port: 6354
show less
DDoS Attack
Web App Attack
🇺🇸
kosada.com
2026-08-25 10:55:22
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇨🇭
backslash
2026-07-12 12:03:04
(3 months ago)
block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB
Bad Web Bot
🇳🇱
soverin
2026-06-05 15:21:05
(4 months ago)
spam
Email Spam
🇺🇸
MPL
2026-05-18 17:40:54
(5 months ago)
tcp/23 (2 or more attempts)
Port Scan
🇺🇸
xmission.com
2026-04-30 09:47:01
(5 months ago)
Blocked by UFW (TCP on 23)
Source port: 12656
TTL: 55
Packet length: 44
TOS: 0x00
This report (for ...
show more
Blocked by UFW (TCP on 23)
Source port: 12656
TTL: 55
Packet length: 44
TOS: 0x00
This report (for 188.253.220.61) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
🇨🇦
polycoda
2026-02-18 12:44:17
(8 months ago)
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
2025-11-17 12:24:16
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇺🇸
TheMadBeaker
2025-06-26 20:31:07
(1 year ago)
Fail2Ban Ban Triggered
HTTP Exploit Attempt
Brute-Force
Web App Attack
Showing 1 to
11
of 11 reports
