🇺🇸
cyfordtechnologies.com
2026-05-02 02:47:24
(1 month ago)
High-abuse ASN prefix: 216.26. : Reported by Cyford API
Web App Attack
2026-04-22 15:27:11
(1 month ago)
Attempt to scan vulnerabilities
Hacking
2026-04-13 23:32:03
(1 month ago)
Attempt to scan vulnerabilities
Hacking
🇨🇭
backslash
2026-01-25 01:10:05
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇳🇱
GabrielJST
2025-12-21 10:27:00
(5 months ago)
*Port Scan* detected from 216.26.234.151 (US/United States/-).
Port Scan
🇺🇸
TPI-Abuse
2025-11-24 08:54:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.234.151 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.234.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:54:21.280865 2025] [security2:error] [pid 9980:tid 9980] [client 216.26.234.151:22333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.form-a-tool.com"] [uri "/.svn/wc.db"] [unique_id "aSQdPYy3Ikh5PdPXGERvkgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:11:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.234.151 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.234.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:11:11.073690 2025] [security2:error] [pid 12102:tid 12119] [client 216.26.234.151:60867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lisabee.net"] [uri "/.git/HEAD"] [unique_id "aSQFD_W9q1mxetu5lC-I7AAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:07:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.234.151 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.234.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:07:46.628682 2025] [security2:error] [pid 4465:tid 4465] [client 216.26.234.151:22467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.drgas.com"] [uri "/.git/HEAD"] [unique_id "aSPoIiAoBi0mTSgCBSK3LwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-13 21:45:26
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2025-11-07 09:08:21
(7 months ago)
[redacted] 216.26.234.151 - - [07/Nov/2025:10:08:07 +0100] "POST /xmlrpc.php HTTP/2.0" 200 448 "-" " ...
show more
[redacted] 216.26.234.151 - - [07/Nov/2025:10:08:07 +0100] "POST /xmlrpc.php HTTP/2.0" 200 448 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/312.5.1 (KHTML, like Gecko) Safari/312.3.1"
[redacted] 216.26.234.151 - - [07/Nov/2025:10:08:09 +0100] "POST /xmlrpc.php HTTP/2.0" 200 448 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6; en-us) AppleWebKit/531.9 (KHTML, like Gecko) Version/4.0.3 Safari/531.9"
[redacted] 216.26.234.151 - - [07/Nov/2025:10:08:10 +0100] "POST /xmlrpc.php HTTP/2.0" 200 448 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)"
[redacted] 216.26.234.151 - - [07/Nov/2025:10:08:12 +0100] "POST /xmlrpc.php HTTP/2.0" 200 448 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6; en-us) AppleWebKit/531.9 (KHTML, like Gecko) Version/4.0.3 Safari/531.9"
[redacted] 216.26.234.151 - - [
...
show less
Hacking
Web App Attack
2025-10-30 14:58:06
(7 months ago)
WordPress Brute Force
Brute-Force
🇩🇪
Marc
2025-10-29 20:44:04
(7 months ago)
Brute-Force
🇩🇪
london2038.com
2025-10-26 05:26:05
(7 months ago)
Detected by WP fail2ban
2025-10-26T06:26:04.764123+01:00 wordpress: Authentication attempt from 216. ...
show more
Detected by WP fail2ban
2025-10-26T06:26:04.764123+01:00 wordpress: Authentication attempt from 216.26.234.151
show less
Brute-Force
Web App Attack
2025-10-18 01:53:57
(7 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report timestamp
show less
Hacking
Brute-Force
2025-10-14 03:26:20
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack