JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.241.81

216.26.241.81 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 16%: ?

16%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.241.81

Whois 216.26.241.81

IP Abuse Reports for 216.26.241.81:

This IP address has been reported a total of 12 times from 8 distinct sources. 216.26.241.81 was first reported on October 17th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 dtorrer	2026-06-27 19:59:07 (1 day ago)	Brute-force general attack.	Brute-Force
Anonymous	2026-05-27 18:28:01 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-08 01:07:08 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.241.81 2026-05 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.241.81 2026-05-07 13:09:31 / 2026-05-07 13:12:14 / 2026-05-07 13:09:03 / 2026-05-07 12:47:53 / 2026-05-07 12:45:16 / show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:00:48 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 chronos	2025-11-25 17:36:23 (7 months ago)	[AUTORAVALT][[25/11/2025 - 14:36:23 -03:00 UTC] Attack from [RIPE Network Coordination Centre] [216. ... show more [AUTORAVALT][[25/11/2025 - 14:36:23 -03:00 UTC] Attack from [RIPE Network Coordination Centre] [216.26.241.81] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various othe] ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:47:07 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.241.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.241.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:46:58.055543 2025] [security2:error] [pid 3409:tid 3409] [client 216.26.241.81:48903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electric-meat-grinder.com.cajunfriedturkey.com"] [uri "/.env"] [unique_id "aSUmshuvFws-UhuRtX6vEgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:22:04 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.241.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.241.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:21:56.962134 2025] [security2:error] [pid 31526:tid 31526] [client 216.26.241.81:60049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.sprek.net"] [uri "/.git/HEAD"] [unique_id "aSUg1NpYTSMGbrLYP0OGdQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:47:33 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.241.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.241.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:47:29.340860 2025] [security2:error] [pid 15101:tid 15106] [client 216.26.241.81:45933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.trinketjar.com"] [uri "/.env"] [unique_id "aSUYwaNKS2jdjfTVKRdVEAAAAQM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:38:40 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.241.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.241.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:38:36.166800 2025] [security2:error] [pid 19910:tid 19910] [client 216.26.241.81:11883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.carboncreekwood.com"] [uri "/.env"] [unique_id "aSUInCjdFePh0VfXlZ5BIwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:53:14 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.241.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.241.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:52:27.622814 2025] [security2:error] [pid 9048:tid 9048] [client 216.26.241.81:16449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.youthriskbehavior.com"] [uri "/.svn/wc.db"] [unique_id "aST9y3fxp9NXJkRCnoCiQwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-02 23:45:00 (7 months ago)	Unauthorized connection attempt	Brute-Force
🇵🇱 sefinek.net	2025-10-17 14:12:08 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.99.211.194

🇮🇳 182.156.19.46

🇲🇾 180.75.116.159

🇭🇰 103.49.62.60

🇦🇪 91.73.61.233

🇨🇳 47.109.68.149

🇺🇸 173.239.254.150

🇯🇵 172.253.6.210

🇺🇸 143.198.134.9

🇧🇾 81.30.98.142

🇷🇺 46.163.144.31

🇩🇪 46.101.195.84

🇧🇷 200.175.201.167

🇷🇺 193.17.92.5

🇳🇱 185.213.175.137

🇮🇩 157.85.208.73

🇫🇷 85.217.140.46

🇳🇱 46.151.178.13

🇬🇧 34.89.69.228

🇻🇳 27.71.230.31