This IP address has been reported a total of 2,887
times from 527 distinct
sources.
213.152.176.252 was first reported on ,
and the most recent report was .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SatFeb1502:53:33.8315202025][security2:error][pid3583097:tid3583125][client213.152.176.252:0][clien ... show more[SatFeb1502:53:33.8315202025][security2:error][pid3583097:tid3583125][client213.152.176.252:0][client213.152.176.252]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"annunci-ticino.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"Z6_zncl5uyDq5lvAZfWvYgAAAAA\"][SatFeb1502:53:33.9222382025][security2:error][pid3582901:tid3583036][client213.152.176.252:0][client213.152.176.252]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/et show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 213.152.176.252 (NL/The Netherlands/ ... show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 213.152.176.252 (NL/The Netherlands/connected-by.global-layer.com): 2 in the last 3600 secs show less
213.152.176.252 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total tim ... show more213.152.176.252 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 246B. Report generated by Endlessh Report Generator v1.2.3 show less
(mod_security) mod_security triggered on hostname [redacted] 213.152.176.252 (NL/The Netherlands/con ... show more(mod_security) mod_security triggered on hostname [redacted] 213.152.176.252 (NL/The Netherlands/connected-by.global-layer.com): (CF_ENABLE) show less