JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.245.188

216.26.245.188

Neutral Activity

13 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

3xK Tech GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS200373

Domain Name

3xktech.cloud

Country

🇩🇪 Germany

City

Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

216.26.245.188 has been reported 13 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 216.26.245.188:

This IP address has been reported a total of 13 times from 10 distinct sources. 216.26.245.188 was first reported on October 7th 2025, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Saec	2026-06-12 02:15:08 (2 months ago)	Jarvis auto-ban: CF honeypot path /xmlrpc.php (3× on saec.me)	Port Scan Web App Attack
🇨🇳 ThreatBook.io	2026-05-11 22:45:24 (3 months ago)	ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/216.26.245.188 2026 ... show more ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/216.26.245.188 2026-05-11 20:29:14 / 2026-05-11 20:28:22 / show less	Web App Attack
Anonymous	2026-01-13 22:24:41 (7 months ago)	216.26.245.188 - - [13/Jan/2026:22:24:39 +0000] "GET /.env HTTP/1.1" 302 477 "-" "Mozilla/5.0 (Windo ... show more 216.26.245.188 - - [13/Jan/2026:22:24:39 +0000] "GET /.env HTTP/1.1" 302 477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-01-05 20:14:10 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 09:38:09 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:38:05.670832 2025] [security2:error] [pid 243932:tid 243974] [client 216.26.245.188:37289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluetigertees.com"] [uri "/.env"] [unique_id "aSQnfVc8EtVRkmyAMev5mAAAAQk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:04:05 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:03:57.884499 2025] [security2:error] [pid 21898:tid 21898] [client 216.26.245.188:11403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.onlineteacher.info"] [uri "/.git/HEAD"] [unique_id "aSQffVbz90PvoVJ0dXJcygAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:55:02 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:54:56.976310 2025] [security2:error] [pid 3377:tid 3377] [client 216.26.245.188:56815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigheartskitchen.lahamradio.com"] [uri "/.env"] [unique_id "aSQBQA2Um97R-DqRMYJd3wAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:30:26 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:30:18.305481 2025] [security2:error] [pid 16415:tid 16415] [client 216.26.245.188:59705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "africanwisdominimageandproverb.com"] [uri "/.git/HEAD"] [unique_id "aSPtaq3VshfyIKJBdKfzxwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-11-07 22:28:23 (9 months ago)	1.696 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2025-11-02 13:27:07 (9 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 06:49:40	Port Scan Brute-Force Exploited Host Web App Attack
🇺🇸 Rip	2025-11-02 05:23:04 (9 months ago)	Authentication attack attempt. CMS Brute Force - Access Forbidden	Brute-Force Web App Attack
🇫🇷 applemooz	2025-11-01 10:49:59 (9 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-10-07 17:13:55 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a01:cb1d:8c24:b300:d840:c3c2:f360:b0d8

🇧🇷 205.210.31.176

🇭🇰 199.45.154.181

🇳🇱 193.47.62.69

🇮🇩 180.254.120.226

🇦🇫 180.94.75.122

🇺🇸 172.234.25.61

🇧🇪 144.86.173.80

🇮🇩 124.40.252.3

🇧🇩 103.25.122.222

🇺🇦 91.235.225.126

🇳🇱 91.92.40.176

🇺🇸 50.114.172.201

🇬🇧 35.203.211.44

🇺🇸 3.17.128.204

🇺🇸 2602:f6f6:2:7da0::1

🇧🇷 205.210.31.167

🇧🇷 205.210.31.156

🇨🇴 186.168.142.232

🇸🇬 172.217.97.26