JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.253.42

216.26.253.42 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.253.42

Whois 216.26.253.42

IP Abuse Reports for 216.26.253.42:

This IP address has been reported a total of 16 times from 9 distinct sources. 216.26.253.42 was first reported on November 13th 2025, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-09-01 22:15:52 (12 minutes ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.site \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-09-01 04:24:03 (18 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇹 Malta	2026-08-31 22:39:45 (23 hours ago)	216.26.253.42 - - [01/Sep/2026:00:39:44 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu ... show more 216.26.253.42 - - [01/Sep/2026:00:39:44 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-08-31 22:02:55 (1 day ago)	(wordpress) Failed wordpress login from 216.26.253.42 (FR/France/-): (CF_ENABLE)	Brute-Force
🇲🇹 Malta	2026-08-30 21:12:03 (2 days ago)	216.26.253.42 - - [30/Aug/2026:23:12:03 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu ... show more 216.26.253.42 - - [30/Aug/2026:23:12:03 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" show less	Hacking Web App Attack
Anonymous	2026-01-05 20:16:34 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇦🇺 MAGIC	2025-12-26 01:15:18 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇹 VHosting	2025-12-23 17:10:18 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 04:16:07 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:16:02.267360 2025] [security2:error] [pid 27207:tid 27207] [client 216.26.253.42:13443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.northmyrtlebeachcondos.com"] [uri "/.svn/wc.db"] [unique_id "aSUtglGtSYpAa7kmZl6BBwAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:04:17 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:03:44.137998 2025] [security2:error] [pid 28826:tid 28881] [client 216.26.253.42:48295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greencitymethods.philacentric.com"] [uri "/.svn/wc.db"] [unique_id "aSUckMWWe4FWNi79sDU7WAAAAFU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:42:49 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:42:43.109505 2025] [security2:error] [pid 20361:tid 20361] [client 216.26.253.42:29349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.fundingangelinvestors.com"] [uri "/.svn/wc.db"] [unique_id "aSQagwEDzIyD7krjPzNXbwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:21:49 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:21:44.246153 2025] [security2:error] [pid 2195:tid 2195] [client 216.26.253.42:31043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.howardherrell.com"] [uri "/.svn/wc.db"] [unique_id "aSQVmBK_ljbuP8I95uHkcwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:29:14 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:29:04.965005 2025] [security2:error] [pid 9110:tid 9110] [client 216.26.253.42:49359] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jkg1.com"] [uri "/.svn/wc.db"] [unique_id "aSP7MO3RDZI9OLegNM-X9QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:25:27 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:25:21.006695 2025] [security2:error] [pid 8821:tid 8821] [client 216.26.253.42:21943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.northcoastgolfden.com"] [uri "/.env"] [unique_id "aSPsQXzPqEdwLZyBXDRUMwAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-15 22:02:47 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 17:02:42.830816 2025] [security2:error] [pid 1705:tid 1705] [client 216.26.253.42:32517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vonkugelgen.com"] [uri "/.env"] [unique_id "aRj4gr3bFfCffNBEerqkaQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇮🇩 163.7.6.114

🇦🇺 125.209.144.199

🇨🇳 112.111.57.33

🇺🇸 84.32.137.88

🇸🇳 213.154.77.61

🇵🇰 203.215.181.200

🇺🇸 147.185.132.15

🇰🇷 115.20.171.54

🇹🇼 110.25.107.25

🇫🇷 91.196.152.191

🇳🇱 45.148.10.151

🇮🇷 37.202.180.112

🇬🇧 5.226.140.18

🇷🇺 5.17.3.32

🇺🇸 4.148.240.195

🇷🇴 2.57.122.53

🇫🇷 207.180.243.111

🇺🇸 143.198.174.13

🇨🇳 118.196.119.108