This IP address has been reported a total of
47
times from
28 distinct
sources.
216.26.231.1 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Czechia
with 5
reports;
Australia
with 1
report;
Switzerland
with 1
report.
The most common categories in these recent reports were:
Web App Attack
7
times;
Brute-Force
5
times;
Hacking
4
times;
Web Spam
1
time;
Bad Web Bot
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 68).
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 216.26.231.1
2026-09-23T09:52:39+02:0 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 216.26.231.1
2026-09-23T09:52:39+02:00 vpn Access-Reject 'crespe_admin' station: 216.26.231.1 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 216.26.231.1
2026-09-22T06:21:00+02:0 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 216.26.231.1
2026-09-22T06:21:00+02:00 vpn Access-Reject 't' station: 216.26.231.1 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Honeypot detection: Cisco ASA exploit attempt. 2 events observed. Reported automatically from a hone ...
show moreHoneypot detection: Cisco ASA exploit attempt. 2 events observed. Reported automatically from a honeypot sensor.
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 216.26.231.1
2026-09-20T22:24:12+02:0 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 216.26.231.1
2026-09-20T22:24:12+02:00 vpn Access-Reject 'commence' station: 216.26.231.1 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 216.26.231.1
2026-09-19T20:34:00+02:0 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 216.26.231.1
2026-09-19T20:34:00+02:00 vpn Access-Reject 'condesa' station: 216.26.231.1 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
[MonSep1412:47:48.4162552026][security2:error][pid92813:tid93176][client216.26.231.1:0]ModSecurity:A ...
show more[MonSep1412:47:48.4162552026][security2:error][pid92813:tid93176][client216.26.231.1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"janus-advisory.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqfQ1FLgX_SwJvPtHx-OiwAAAUo\"]
show less
Repeated exploit attempts, for example: /?rest_route=/batch/v1 {x22requestsx22: [{x22methodx22: x22P ...
show moreRepeated exploit attempts, for example: /?rest_route=/batch/v1 {x22requestsx22: [{x22methodx22: x22POSTx22, x22pathx22: x22http://:x22} (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:155.0) Gecko/20100101 Firefox/155.0")
show less
