JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

193.26.115.55

Neutral Activity

Abuse confidence score ?

0% Low Risk

14 reports

12 reporters · latest 2 years ago

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Hostname(s)	193.26.115.55.powered.by.rdp.sh
Domain Name	as210558.net
Country	🇷🇴 Romania
City	Bucharest, Bucharest

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

193.26.115.55 has been reported 14 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 193.26.115.55

Export CSV

This IP address has been reported a total of 14 times from 12 distinct sources. 193.26.115.55 was first reported on March 29th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-07-03 08:56:56 (2 years ago)	Unauthorized connection attempt	Brute-Force
Anonymous	2024-07-03 03:53:02 (2 years ago)	Port Scan detected from 193.26.115.55 (US/United States/193.26.115.55.powered.by.rdp.sh). 11 hits ... show more Port Scan detected from 193.26.115.55 (US/United States/193.26.115.55.powered.by.rdp.sh). 11 hits in the last 90 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jul 2 23:52:45 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=193.26.115.55 DST=0.0.0.x LEN=5 show less	Port Scan
Anonymous	2024-04-13 20:17:12 (2 years ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇪🇸 10dencehispahard SL	2024-04-13 20:01:34 (2 years ago)	Suspicious activity detected by Modsecurity [Suspicious IP found on 330 endpoints 346 hits. Reincide ... show more Suspicious activity detected by Modsecurity [Suspicious IP found on 330 endpoints 346 hits. Reincident by 0. Rules:] show less	Web App Attack
Anonymous	2024-04-13 13:32:39 (2 years ago)	193.26.115.55 - - [13/Apr/2024:13:32:39 +0000] "GET /.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; L ... show more 193.26.115.55 - - [13/Apr/2024:13:32:39 +0000] "GET /.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking Web App Attack
🇩🇪 hfbusiness.de	2024-04-13 08:40:06 (2 years ago)	193.26.115.55 - - [13/Apr/2024:10:40:05 +0200] "GET /.env HTTP/1.1" 404 492 "-" "Mozilla/5.0 (X11; L ... show more 193.26.115.55 - - [13/Apr/2024:10:40:05 +0200] "GET /.env HTTP/1.1" 404 492 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇷 Security_Whaller	2024-04-13 04:14:50 (2 years ago)	Malicious activity detected on Honeypot.	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-04-13 03:30:12 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 193.26.115.55 (193.26.115.55.powered.by.rdp.sh) ... show more (mod_security) mod_security (id:210492) triggered by 193.26.115.55 (193.26.115.55.powered.by.rdp.sh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 12 23:30:09.074648 2024] [security2:error] [pid 666541] [client 193.26.115.55:59866] [client 193.26.115.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.51"] [uri "/.env"] [unique_id "Zhn8QR2S5BJ0iyJjOaabFAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-04-13 03:14:41 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 193.26.115.55 (193.26.115.55.powered.by.rdp.sh) ... show more (mod_security) mod_security (id:210492) triggered by 193.26.115.55 (193.26.115.55.powered.by.rdp.sh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 12 23:14:37.411929 2024] [security2:error] [pid 24598] [client 193.26.115.55:53083] [client 193.26.115.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.222"] [uri "/.env"] [unique_id "Zhn4nVbPoGToD1i_Pc9b4wAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ISPLtd	2024-04-13 00:43:58 (2 years ago)	193.26.115.55 - - [12/Apr/2024:18:43:58 -0600] "GET /.env ...	Hacking Web App Attack
🇻🇳 Xuan Can	2024-04-13 00:26:38 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 193.26.115.55 (US/United States/193.26.115.55.p ... show more (mod_security) mod_security (id:210492) triggered by 193.26.115.55 (US/United States/193.26.115.55.powered.by.rdp.sh): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 13 07:26:31.250583 2024] [security2:error] [pid 19103:tid 47534095492864] [client 193.26.115.55:52704] [client 193.26.115.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "103.7.42.146"] [uri "/.env"] [unique_id "ZhnRN3MsP94RgHXcM-NhqAAAAM8"] show less	Brute-Force SSH
🇺🇸 ISPLtd	2024-04-03 08:52:30 (2 years ago)	193.26.115.55 - - [03/Apr/2024:02:52:29 -0600] "GET /.env ...	Hacking Web App Attack
🇮🇩 xveil	2024-03-29 15:35:45 (2 years ago)	2024-03-29T22:35:43.803783 mail-honeypot postfix/submission/smtpd[26657]: warning: unknown[193.26.11 ... show more 2024-03-29T22:35:43.803783 mail-honeypot postfix/submission/smtpd[26657]: warning: unknown[193.26.115.55]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
Anonymous	2024-03-29 15:35:27 (2 years ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 209.38.85.194

🇳🇱 109.160.32.43

🇮🇷 85.198.19.251

🇸🇬 47.236.201.172

🇻🇳 2402:800:6318:8f87:95d4:9966:f1db:ebc9

🇹🇼 211.72.100.146

🇧🇪 198.235.24.235

🇩🇪 172.71.172.222

🇳🇱 104.23.166.11

🇫🇷 92.222.108.108

🇬🇧 87.106.63.76

🇺🇸 64.62.197.79

🇱🇹 62.60.130.173

🇺🇸 45.131.194.174

🇰🇿 37.208.46.130

🇷🇴 2.57.122.150

🇦🇷 200.13.45.79

🇺🇸 195.63.1.159

🇵🇦 179.43.153.2

🇩🇪 167.94.145.27