|
🇦🇺
oncord
|
|
Form spam
|
Web Spam
|
|
🇬🇧
oncord
|
|
Form spam
|
Web Spam
|
|
🇺🇸
etu brutus
|
|
216.26.253.96 Blocked by [Attack Vector List]
...
|
Hacking
Brute-Force
Exploited Host
|
|
🇨🇿
lp
|
|
Unauthorized VPN login attempts: 3 attempts were recorded from 216.26.253.96
2026-09-03T15:19:37+02:00 vpn Access-Reject 'share' station: 216.26.253.96 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 3 attempts were recorded from 216.26.253.96
2026-09-03T15:19:37+02:00 vpn Access-Reject 'share' station: 216.26.253.96 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-03T15:22:41+02:00 vpn Access-Reject 'vpn' station: 216.26.253.96 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-03T15:24:30+02:00 vpn Access-Reject 'tamrinnext' station: 216.26.253.96 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
DRI
|
|
Web attack/Malicious activity detected
|
Web App Attack
|
|
🇫🇷
Sklurk
|
|
Web App Attack
|
Web App Attack
|
|
Anonymous
|
|
B: f2b asterisk aggressive 3x
|
Email Spam
|
|
🇫🇮
sgofferj
|
|
Attack attempt on SIP server
|
Fraud VoIP
Hacking
Brute-Force
|
|
🇦🇺
RedBear IT
|
|
"DDoS against public endpoint"
|
DDoS Attack
|
|
🇩🇪
on-com
|
|
URL scan
|
Brute-Force
Web App Attack
|
|
🇩🇪
ReporTR
|
|
Fail2Ban plesk-modsecurity: 3 attempts from 216.26.253.96 (Country: <country>, <rdns>)
|
Hacking
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.253.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 07 12:51:01.357530 2026] [security2:error] [pid 7921:tid 7921] [client 216.26.253.96:0] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.253.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 07 12:51:01.357530 2026] [security2:error] [pid 7921:tid 7921] [client 216.26.253.96:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isimsiz.xyz"] [uri "/.git/HEAD"] [unique_id "aV6dBQKsoi0nVBhsBf4vTAAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
David Ferneding
|
|
Blocked by UFW (TCP on 80)
Source port: 22985
TTL: 55
Packet length: 60
TOS: 0x00
This report (for 216.26.253.96) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.253.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:02:40.908815 2025] [security2:error] [pid 6563:tid 6563] [client 216.26.253.96:31213] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.253.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:02:40.908815 2025] [security2:error] [pid 6563:tid 6563] [client 216.26.253.96:31213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vibratingharvard.com"] [uri "/.svn/wc.db"] [unique_id "aVILcKV5VvQr7Ht1mdr5EQAAACA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.253.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:30:23.191184 2025] [security2:error] [pid 6193:tid 6193] [client 216.26.253.96:29209] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.253.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:30:23.191184 2025] [security2:error] [pid 6193:tid 6193] [client 216.26.253.96:29209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hillconsultants.com"] [uri "/.svn/wc.db"] [unique_id "aVH1z2xPqI4RBH_XlbG8wgAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
