JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.243.242

216.26.243.242 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.243.242

Whois 216.26.243.242

IP Abuse Reports for 216.26.243.242:

This IP address has been reported a total of 22 times from 11 distinct sources. 216.26.243.242 was first reported on October 3rd 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-16 02:18:57 (2 hours ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-17 01:00:28 (4 weeks ago)	Web App Attack	Web App Attack
🇫🇮 inlink.ltd	2026-05-15 13:48:21 (2 months ago)	Known malicious PHP file or CMS probe	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 agenciahypelab.com.br	2026-01-04 02:33:57 (6 months ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
Anonymous	2026-01-02 14:58:58 (6 months ago)	2026-01-02T16:58:57.408002+02:00 zanati wp(www.sahpa.co.za)[397007]: Blocked authentication attempt ... show more 2026-01-02T16:58:57.408002+02:00 zanati wp(www.sahpa.co.za)[397007]: Blocked authentication attempt for [email protected] from 216.26.243.242 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 02:43:12 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 21:43:09.250297 2025] [security2:error] [pid 32089:tid 32089] [client 216.26.243.242:33485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "odinathletes.com"] [uri "/.svn/wc.db"] [unique_id "aTY7PSnvq58aTYtLJjVDQwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-12-08 02:05:03 (7 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-07 13:42:52 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:42:47.479009 2025] [security2:error] [pid 20491:tid 20491] [client 216.26.243.242:54779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jaojoco.org"] [uri "/.env"] [unique_id "aTWEVxul7vSiEpFRwBjcsQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 jjnxpct	2025-12-07 04:54:45 (7 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.svn/wc.db (Rule ID: 920440) - URL file extension is restricted by policy show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 04:38:41 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:38:37.296441 2025] [security2:error] [pid 28290:tid 28290] [client 216.26.243.242:34619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "destructionstudios.com"] [uri "/.git/HEAD"] [unique_id "aTJhzapJnY_S-Co3PNWbHQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 geot	2025-11-27 13:43:02 (7 months ago)	GET /.svn/wc.db HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:04:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:04:47.018678 2025] [security2:error] [pid 2454508:tid 2454508] [client 216.26.243.242:29431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.depcare.com"] [uri "/.svn/wc.db"] [unique_id "aSaYfzaG2RPimix8vPF_HAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:07:06 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:07:01.428657 2025] [security2:error] [pid 12785:tid 12785] [client 216.26.243.242:52613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.abcollie.com"] [uri "/.svn/wc.db"] [unique_id "aSZEpbq4GPYterZ2z4jz5QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:35:06 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.243.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:34:57.720537 2025] [security2:error] [pid 24903:tid 24903] [client 216.26.243.242:18655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.iktonline.org"] [uri "/.git/HEAD"] [unique_id "aSVcIW1h6EIZdRbE8q-CCgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.197

🇱🇹 62.60.130.219

🇺🇸 49.51.196.42

🇦🇺 2400:6180:10:200::d172:c000

🇺🇸 194.99.25.198

🇨🇳 106.55.56.50

🇨🇳 81.70.194.162

🇩🇪 194.88.98.103

🇫🇮 178.20.210.151

🇺🇸 162.216.150.32

🇸🇦 149.109.81.118

🇫🇷 85.217.140.3

🇺🇸 66.132.186.240

🇧🇷 45.182.213.137

🇬🇧 5.252.83.85

🇺🇸 3.94.102.45

🇺🇸 2a04:4e40:e020:0:33c:a689:be95:5a4

🇬🇧 154.16.44.13

🇨🇺 152.207.22.110

🇭🇰 152.32.225.108