JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.241.249

216.26.241.249 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.241.249

Whois 216.26.241.249

IP Abuse Reports for 216.26.241.249:

This IP address has been reported a total of 18 times from 7 distinct sources. 216.26.241.249 was first reported on October 2nd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-06-02 22:15:46 (2 days ago)	Form spam	Web Spam
🇱🇻 garmtech.com	2026-05-29 20:24:04 (6 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-24.216.26.241.249.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-24.216.26.241.249.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 oncord	2026-05-27 03:02:44 (1 week ago)	Form spam	Web Spam
🇱🇻 garmtech.com	2026-05-13 22:20:04 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-20.216.26.241.249.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-20.216.26.241.249.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 4server	2026-05-01 21:11:09 (1 month ago)	[FriMay0123:11:03.1068002026][security2:error][pid469406:tid469524][client216.26.241.249:0]ModSecuri ... show more [FriMay0123:11:03.1068002026][security2:error][pid469406:tid469524][client216.26.241.249:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.farmaciaferrari.ch\"][uri\"/Contatti\"][unique_id\"afUW54wytZekYiUpiAe2mwAAARQ\"]\,referer:https://www.farmaciaferrari.ch/Contatti show less	Port Scan Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-04-21 23:22:56 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-22.216.26.241.249.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-22.216.26.241.249.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 oncord	2026-04-02 14:17:02 (2 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-03-27 06:13:06 (2 months ago)	Form spam	Web Spam
🇬🇧 oncord	2026-03-20 08:54:41 (2 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-12-02 19:33:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.241.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.241.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:33:37.328850 2025] [security2:error] [pid 10487:tid 10487] [client 216.26.241.249:21095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hogfiddlesandsuch.com"] [uri "/.git/HEAD"] [unique_id "aS8_EcWD8xxnksXkK--utAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 15:21:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.241.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.241.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:21:09.936803 2025] [security2:error] [pid 16308:tid 16308] [client 216.26.241.249:54867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pfmarch.com"] [uri "/.env"] [unique_id "aS8D5fL5WdAFDX66jSKmsAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 14:24:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.241.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.241.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 09:24:10.113734 2025] [security2:error] [pid 8186:tid 8186] [client 216.26.241.249:53263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibken.com"] [uri "/.git/HEAD"] [unique_id "aS72irWB_gC-HHbI_G4bbAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:49:02 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.241.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.241.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:48:31.428958 2025] [security2:error] [pid 18411:tid 18411] [client 216.26.241.249:44621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.nauticalchristmascards.com"] [uri "/.svn/wc.db"] [unique_id "aSVRP4dT62QImi_QtPAz1QAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:30:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.241.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.241.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:30:14.619809 2025] [security2:error] [pid 22013:tid 22013] [client 216.26.241.249:33901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyclingboardgames.net"] [uri "/.svn/wc.db"] [unique_id "aSUUtrCs5WtWU-_kwKFyvwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-02 23:48:00 (7 months ago)	Unauthorized connection attempt	Brute-Force

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇫🇷 193.200.171.13

🇷🇴 193.32.162.76

🇳🇱 176.65.139.55

🇦🇷 167.250.118.3

🇨🇳 123.184.25.5

🇬🇧 87.106.44.172

🇪🇸 79.112.10.231

🇸🇬 47.82.11.6

🇺🇸 18.217.208.51

🇺🇸 18.190.15.50

🇺🇸 207.241.173.229

🇧🇪 198.235.24.154

🇳🇱 185.242.226.72

🇺🇸 164.92.106.15

🇫🇮 147.185.133.252

🇺🇸 135.237.126.209

🇮🇳 125.20.245.106

🇮🇳 14.194.125.58

🇺🇸 13.89.125.224