🇩🇪
Blexyel
2026-10-07 16:34:42
(1 week ago)
216.26.255.252 - - [07/Oct/2026:18:34:41 +0200] "GET /.git/info/exclude HTTP/1.1" 200 240 "-" "git/2 ...
show more
216.26.255.252 - - [07/Oct/2026:18:34:41 +0200] "GET /.git/info/exclude HTTP/1.1" 200 240 "-" "git/2.40.0" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
🇸🇬
drewf.ink
2026-10-02 12:44:57
(2 weeks ago)
[12:44] Attempted HTTP access to an exposed .git repository (HEAD)
Web App Attack
🇫🇷
Sklurk
2026-08-08 05:19:44
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
ph
2026-07-11 21:51:50
(3 months ago)
Bad web bot attempting to run wp-login.php on non-WP site
Hacking
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-02-19 01:38:20
(7 months ago)
http-sensitive-files - IP: 216.26.255.252 - time="2026-02-19T02:38:20+01:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 216.26.255.252 - time="2026-02-19T02:38:20+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 216.26.255.252 (FR/200373) : 4h ban on Ip 216.26.255.252" module=db
show less
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:25
(9 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇮🇹
VHosting
2025-12-23 16:20:31
(9 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-27 21:16:59
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.255.252 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.255.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 16:16:56.052185 2025] [security2:error] [pid 15090:tid 15090] [client 216.26.255.252:45871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edgecomix.com"] [uri "/.svn/wc.db"] [unique_id "aSi_yJW0VWyiyR6eh1kGjgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 18:58:17
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.255.252 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.255.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 13:58:11.603483 2025] [security2:error] [pid 20130:tid 20130] [client 216.26.255.252:20755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abcollie.com"] [uri "/.git/HEAD"] [unique_id "aSifQ08itiO41VFYK8rkAAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-13 18:32:03
(11 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/13 12:30:42
Port Scan
Brute-Force
Exploited Host
Web App Attack
2025-11-07 08:58:36
(11 months ago)
[redacted] 216.26.255.252 - - [07/Nov/2025:09:58:21 +0100] "POST /xmlrpc.php HTTP/2.0" 200 448 "-" " ...
show more
[redacted] 216.26.255.252 - - [07/Nov/2025:09:58:21 +0100] "POST /xmlrpc.php HTTP/2.0" 200 448 "-" "Mozilla/5.0 (Linux; Android 7.0; HUAWEI VNS-L23 Build/HUAWEIVNS-L23) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36"
[redacted] 216.26.255.252 - - [07/Nov/2025:09:58:23 +0100] "POST /xmlrpc.php HTTP/2.0" 200 448 "-" "Mozilla/5.0 (Linux; Android 6.0.1; MotoG3 Build/MPIS24.107-55-2-17) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36"
[redacted] 216.26.255.252 - - [07/Nov/2025:09:58:24 +0100] "POST /xmlrpc.php HTTP/2.0" 200 448 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MSN 9.0;MSN 9.1; MSNbVZ02; MSNmen-us; MSNcOTH; MPLUS)"
[redacted] 216.26.255.252 - - [07/Nov/2025:09:58:26 +0100] "POST /xmlrpc.php HTTP/2.0" 200 448 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5"
[redacted] 216.26.255.252 - - [07/No
...
show less
Hacking
Web App Attack
🇦🇺
AWW-Admin
2025-10-29 14:04:30
(11 months ago)
(wordpress) Failed wordpress login from 216.26.255.252 (FR/France/-)
Brute-Force