JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.245.167

216.26.245.167 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 62%: ?

62%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.245.167

Whois 216.26.245.167

IP Abuse Reports for 216.26.245.167:

This IP address has been reported a total of 60 times from 34 distinct sources. 216.26.245.167 was first reported on October 29th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2025-12-03 03:32:07 (9 months ago)	Form spam	Web Spam
🇮🇳 Altis Shield	2025-12-01 00:49:31 (9 months ago)	Possible port scan detected from 216.26.245.167 (masscan/nmap signature)	Email Spam Port Scan
🇦🇺 oncord	2025-11-30 23:31:45 (9 months ago)	Form spam	Web Spam
🇫🇮 Shaik Sai Meera	2025-11-25 17:50:11 (9 months ago)	IM360 WAF: Hidden file access	Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 05:44:04 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:43:43.435725 2025] [security2:error] [pid 13738:tid 13738] [client 216.26.245.167:10047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jperverseincentives.org"] [uri "/.svn/wc.db"] [unique_id "aSVCD-nYHYKstounuhxm4QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:38:24 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:38:18.754230 2025] [security2:error] [pid 5695:tid 5695] [client 216.26.245.167:49617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ciick.me"] [uri "/.svn/wc.db"] [unique_id "aSUyumEkdrghczr-aYDnDwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:11:03 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:10:54.905751 2025] [security2:error] [pid 20246:tid 20246] [client 216.26.245.167:50305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.manatawnycreekfarm.com"] [uri "/.env"] [unique_id "aSUsTtEndWMtZKLevWpz3AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:48:38 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:48:33.441270 2025] [security2:error] [pid 4645:tid 4645] [client 216.26.245.167:21339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dandksupply.com"] [uri "/.git/HEAD"] [unique_id "aSUnEefTyCuAy68_rK4gCAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:22:48 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:22:43.253539 2025] [security2:error] [pid 7633:tid 7633] [client 216.26.245.167:43529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.descolargtsv.com"] [uri "/.git/HEAD"] [unique_id "aSUhA1sQUM7rgqx_IgMThQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:47:16 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:47:09.542073 2025] [security2:error] [pid 22245:tid 22245] [client 216.26.245.167:17847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thumbliving.jasbemarketing.com"] [uri "/.env"] [unique_id "aSUYrYwRj0Xv8LUg-8BECgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:20:13 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:20:05.713258 2025] [security2:error] [pid 9962:tid 9962] [client 216.26.245.167:54763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.btsalesrep.com"] [uri "/.svn/wc.db"] [unique_id "aST2NdBRoP_aZgxnhqpcXQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-21 18:55:50 (9 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/21 12:53:54	Port Scan Brute-Force Exploited Host Web App Attack
🇵🇱 sefinek.net	2025-11-19 08:54:43 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 applemooz	2025-11-01 11:49:22 (10 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇦🇺 AWW-Admin	2025-10-29 16:23:56 (10 months ago)	(wordpress) Failed wordpress login from 216.26.245.167 (DE/Germany/-)	Brute-Force

Showing 46 to 60 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.58.176.42

🇲🇦 196.89.158.215

🇪🇨 190.57.141.50

🇺🇸 162.241.181.223

🇵🇪 161.132.100.45

🇫🇷 147.79.21.59

🇨🇳 112.103.72.105

🇺🇸 40.119.43.232

🇦🇷 38.51.21.218

🇦🇷 38.51.21.214

🇺🇸 172.212.228.106

🇺🇸 109.122.18.192

🇮🇳 103.179.111.84

🇫🇷 85.217.140.45

🇮🇳 35.154.197.246

🇳🇱 195.178.110.30

🇷🇴 193.46.255.51

🇧🇷 191.5.98.214

🇧🇷 179.51.153.37

🇺🇸 173.239.240.63