JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.242.218.116

209.242.218.116 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 25%: ?

25%

ISP	Estrada Nacional
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203020
Domain Name	hostroyale.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.242.218.116

Whois 209.242.218.116

IP Abuse Reports for 209.242.218.116:

This IP address has been reported a total of 21 times from 3 distinct sources. 209.242.218.116 was first reported on June 23rd 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-26 08:07:54 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 04:07:46.494712 2026] [security2:error] [pid 31194:tid 31194] [client 209.242.218.116:43944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "act-research.com"] [uri "/sftp-config.json"] [unique_id "aj4zUm5n7bzSIfmCAvnNpgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 01:34:00 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:33:57.693823 2026] [security2:error] [pid 5976:tid 5982] [client 209.242.218.116:52478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accushot.com"] [uri "/sftp-config.json"] [unique_id "aj3XBapy_OxlyvtvJfe48gAAAEQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 00:59:34 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 20:59:29.543760 2026] [security2:error] [pid 3318:tid 3318] [client 209.242.218.116:46150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accpp.link"] [uri "/sftp-config.json"] [unique_id "aj3O8QsA_acyN4qnfnjMHwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 00:25:58 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 20:25:51.141669 2026] [security2:error] [pid 18416:tid 18416] [client 209.242.218.116:18106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accordionfactory.com"] [uri "/sftp-config.json"] [unique_id "aj3HD9qbsrEG93I6g1oYLAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 20:01:09 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 16:01:02.664874 2026] [security2:error] [pid 19162:tid 19162] [client 209.242.218.116:4658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abundancecompany.com"] [uri "/sftp-config.json"] [unique_id "aj2I_vNDpGTQkGx2AZX0nAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 09:36:57 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 05:36:50.131182 2026] [security2:error] [pid 26915:tid 26915] [client 209.242.218.116:60562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mmaccaux.com"] [uri "/sftp-config.json"] [unique_id "ajz2stXPsXQnLVcrLjVsxQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-25 03:04:46 (1 day ago)	[ThuJun2505:04:42.4283492026][security2:error][pid1422450:tid1422470][client209.242.218.116:0]ModSec ... show more [ThuJun2505:04:42.4283492026][security2:error][pid1422450:tid1422470][client209.242.218.116:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"mjgold.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"ajyaympNtMIIxfkiDzA23AAAAJE\"] show less	Port Scan Brute-Force Web App Attack
🇮🇩 Burayot	2026-06-25 00:02:53 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 209.242.218.116 (IN/India/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 209.242.218.116 (IN/India/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 20:28:49 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 16:28:42.407099 2026] [security2:error] [pid 5479:tid 5479] [client 209.242.218.116:22268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "namefinder.com"] [uri "/sftp-config.json"] [unique_id "ajw9-t1MHsTO0onovXij_gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 17:14:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 13:14:27.976294 2026] [security2:error] [pid 7661:tid 7661] [client 209.242.218.116:22788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miraclepunchy.com"] [uri "/sftp-config.json"] [unique_id "ajwQc1ApOFDacBPAunAd6wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 14:19:17 (1 day ago)	(mod_security) mod_security (id:210580) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210580) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 10:19:13.200477 2026] [security2:error] [pid 23001:tid 23001] [client 209.242.218.116:18114] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|mininoarg.com\|F\|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: http:/microchip-usa.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "mininoarg.com"] [uri "/.vscode/sftp.json"] [unique_id "ajvnYWoeE1Oj2HUuZ-SsVAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 12:30:49 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 08:30:42.260224 2026] [security2:error] [pid 830:tid 830] [client 209.242.218.116:20802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "minetterisquez.com"] [uri "/sftp-config.json"] [unique_id "ajvN8jsNGbwD_DpSHDWhxgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 10:25:10 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 06:25:04.805292 2026] [security2:error] [pid 27929:tid 27929] [client 209.242.218.116:53800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindforestmovie.com"] [uri "/sftp-config.json"] [unique_id "ajuwgFsqB1IjykBok2Z6UQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 10:08:55 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 06:08:52.036208 2026] [security2:error] [pid 19707:tid 19707] [client 209.242.218.116:49956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindbodyrestored.com"] [uri "/sftp-config.json"] [unique_id "ajustIv9NXhWPsNtECYCAgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 07:43:51 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 209.242.218.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 03:43:47.845853 2026] [security2:error] [pid 1925:tid 1925] [client 209.242.218.116:10558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "milliondollarbelt.com"] [uri "/sftp-config.json"] [unique_id "ajuKs97oLDLVNvhxgaZCWgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 194.50.235.146

🇸🇬 172.253.236.215

🇺🇸 167.88.164.171

🇫🇷 91.231.89.135

🇹🇷 91.228.227.173

🇫🇷 85.217.140.38

🇧🇾 81.30.98.142

🇨🇦 38.3.99.110

🇺🇸 172.253.244.158

🇺🇸 162.216.150.215

🇺🇸 162.216.150.165

🇭🇰 45.142.154.106

🇬🇧 35.203.211.143

🇬🇧 31.59.27.25

🇺🇸 18.119.209.50

🇲🇽 187.216.224.85

🇮🇳 183.82.1.38

🇺🇸 162.216.149.224

🇲🇽 148.228.51.139

🇵🇱 134.112.56.47