JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.245.106

216.26.245.106 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.245.106

Whois 216.26.245.106

IP Abuse Reports for 216.26.245.106:

This IP address has been reported a total of 28 times from 14 distinct sources. 216.26.245.106 was first reported on November 2nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-08 01:13:42 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 BirdCo Telecom	2026-07-06 08:41:05 (3 days ago)		Brute-Force Fraud VoIP
Anonymous	2026-07-05 18:50:09 (3 days ago)	B: f2b asterisk aggressive 3x	Email Spam
🇮🇹 Francesco Ippoliti	2026-07-05 02:15:57 (4 days ago)	[Jul 5 04:15:56] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:201@154 ... show more [Jul 5 04:15:56] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '216.26.245.106:57218' (callid: 0f9a84e9b2dc656964c0718415974137) - No matching endpoint found ... show less	Brute-Force Port Scan
🇮🇹 Francesco Ippoliti	2026-07-03 22:08:24 (5 days ago)	[Jul 4 00:08:24] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:777@154 ... show more [Jul 4 00:08:24] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '216.26.245.106:24169' (callid: 941871c99c423048cf64ff50e325df96) - No matching endpoint found [Jul 4 00:08:24] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '216.26.245.106:24169' (callid: 941871c99c423048cf64ff50e325df96) - No matching endpoint found ... show less	Brute-Force Port Scan
🇩🇪 4server	2026-05-25 15:28:59 (1 month ago)	[MonMay2517:28:54.7769332026][security2:error][pid100813:tid100951][client216.26.245.106:0]ModSecuri ... show more [MonMay2517:28:54.7769332026][security2:error][pid100813:tid100951][client216.26.245.106:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"restaurantgandria.ch\"][uri\"/wp-login.php\"][unique_id\"ahRqthi3jhRoCgtlvwayzwAAANg\"] show less	Port Scan Brute-Force Web App Attack
🇮🇩 securejdprop	2026-05-05 00:01:25 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 63). Ip 216.26.245.106 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-05-05 00:01:23.767334034 +0000 UTC show less	Hacking Web App Attack
🇪🇸 10dencehispahard SL	2026-01-16 08:13:00 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-12-31 02:26:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 21:26:28.968107 2025] [security2:error] [pid 20805:tid 20805] [client 216.26.245.106:34639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "osmanhc.com"] [uri "/.svn/wc.db"] [unique_id "aVSJ1KUuEeKq_67jhHN2mAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-30 18:46:06 (6 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 TPI-Abuse	2025-12-30 12:20:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 07:20:25.305704 2025] [security2:error] [pid 111538:tid 111549] [client 216.26.245.106:35661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rawsynergy.com"] [uri "/.env"] [unique_id "aVPDiVXDtQlHeRyg7qj_HQAAAIk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-12-29 19:05:04 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇦 1gz	2025-12-29 17:36:57 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /admin UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-29 11:15:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 06:15:11.033957 2025] [security2:error] [pid 8707:tid 8707] [client 216.26.245.106:36919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spottedeaglearts.com"] [uri "/.git/HEAD"] [unique_id "aVJiv9s_05-oPX2kY6tchwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 06:30:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:30:21.389031 2025] [security2:error] [pid 26880:tid 26880] [client 216.26.245.106:37749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roughexports.com"] [uri "/.env"] [unique_id "aVIf_bBnI8vkhu_DXByhdQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:52d4:2:75af:9985:33a5:8d73:83ac

🇺🇸 2607:f8b0:4001:c5a::125

🇺🇸 174.138.44.8

🇳🇱 91.92.40.87

🇵🇱 45.39.59.229

🇵🇱 176.53.159.198

🇺🇸 173.73.27.232

🇨🇳 117.44.64.5

🇬🇧 87.236.176.119

🇳🇱 64.89.162.37

🇱🇹 62.60.130.219

🇳🇱 45.198.224.15

🇧🇷 205.210.31.139

🇺🇸 198.57.172.249

🇲🇽 189.138.33.230

🇧🇴 177.222.111.104

🇧🇷 177.105.113.95

🇭🇰 172.253.5.27

🇺🇸 172.212.200.29

🇧🇷 131.221.15.58