JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.254.242

216.26.254.242 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 29%: ?

29%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.254.242

Whois 216.26.254.242

IP Abuse Reports for 216.26.254.242:

This IP address has been reported a total of 13 times from 10 distinct sources. 216.26.254.242 was first reported on October 24th 2025, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-31 00:08:00 (10 hours ago)	Web App Attack	Web App Attack
Anonymous	2026-07-29 07:00:00 (2 days ago)	Apache probe; attempts=18; exact paths: /xmlrpc.php	Web App Attack
Anonymous	2026-07-07 21:26:50 (3 weeks ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-07-07 04:25:10 (3 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 pm33	2026-07-02 21:42:58 (4 weeks ago)	Wordpress login attempts	Brute-Force
🇲🇽 octageeks.com	2026-07-01 04:20:39 (4 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇬🇧 PeravixGroup	2026-05-07 15:20:44 (2 months ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 nowyouknow	2025-12-28 16:36:32 (7 months ago)	(From [email protected]) Hi, it’s Jayrn. If your site already uses — or is preparing to use ... show more (From [email protected]) Hi, it’s Jayrn. If your site already uses — or is preparing to use — affiliate links, this will be relevant. One issue I see constantly is that monetization is treated as something you “add later,” instead of something that’s designed into the site from the beginning. That usually leads to: random placement of links unclear visitor intent unpredictable income It works, but never consistently. I put together a short explanation of why this happens and what changes once monetization is structured properly: https://marketersmentor.com/recurring-income-system.php?refer=bessettechiropractic.com You’ll know quickly whether this applies to your situation. Jayrn PS: And one quick note so you’re not wondering why you’re hearing from me: I only reach out to website owners because they’re the ones actively building something online. I’m not blasting random emails. I’m simply sharing a resource that has been helping a lot of people create predictable onl show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-11-25 06:57:33 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:57:26.800140 2025] [security2:error] [pid 20783:tid 20783] [client 216.26.254.242:17463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.chicagoholidaycards.com"] [uri "/.git/HEAD"] [unique_id "aSVTVibnAeG-u_1cA-k-ZgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:43:44 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:43:38.881491 2025] [security2:error] [pid 5050:tid 5050] [client 216.26.254.242:42513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elefen.org"] [uri "/.git/HEAD"] [unique_id "aSVCCl8xWtQBdnYRkxOypgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-25 04:22:27 (8 months ago)	Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ... show more Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:53:05 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:53:00.547015 2025] [security2:error] [pid 17022:tid 17049] [client 216.26.254.242:27413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "datuinc.com"] [uri "/.env"] [unique_id "aSUaDGe42NY3FNbGoYCAIgAAAE8"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-10-24 19:34:20 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.212

🇬🇫 82.123.161.130

🇩🇪 51.195.109.218

🇮🇳 20.204.81.42

🇧🇷 200.150.74.254

🇧🇯 137.255.13.247

🇨🇳 118.145.246.44

🇳🇱 77.239.124.242

🇦🇺 65.254.95.159

🇰🇷 61.111.250.85

🇮🇪 51.187.73.105

🇮🇩 36.92.140.209

🇫🇷 5.196.154.102

🇲🇽 189.190.217.141

🇳🇱 159.223.14.97

🇨🇳 117.25.124.245

🇻🇳 113.184.149.239

🇲🇾 47.254.192.136

🇸🇬 47.245.117.221

🇷🇺 45.91.64.7