JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.245.199

216.26.245.199 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 26%: ?

26%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.245.199

Whois 216.26.245.199

IP Abuse Reports for 216.26.245.199:

This IP address has been reported a total of 15 times from 12 distinct sources. 216.26.245.199 was first reported on October 3rd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-06-04 04:13:31 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 Martin Lundstrom	2026-05-31 16:44:02 (2 weeks ago)	https://www.eagleeye-intelligence.com — IDS: network scan. Automatically detected and blocked.	Port Scan Web App Attack
🇺🇸 lostswordfish.com	2026-05-30 10:06:04 (2 weeks ago)	Wordfence waf block on fypeducation	Web App Attack
🇩🇪 iNetWorker	2026-05-30 07:12:50 (2 weeks ago)	trolling for resource vulnerabilities	Web App Attack
🇲🇽 octageeks.com	2026-05-29 04:08:47 (2 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 Spiderpiggy	2026-05-27 10:19:52 (2 weeks ago)	Automatically reported via Blackhole honeypot on games4you.be. Attempted access to restricted endpoi ... show more Automatically reported via Blackhole honeypot on games4you.be. Attempted access to restricted endpoint: /wp-login.php show less	Brute-Force Bad Web Bot SSH
🇩🇪 4server	2026-04-13 17:55:45 (2 months ago)	[MonApr1319:55:25.4224702026][security2:error][pid1311240:tid1311347][client216.26.245.199:0]ModSecu ... show more [MonApr1319:55:25.4224702026][security2:error][pid1311240:tid1311347][client216.26.245.199:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"195\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"volcano.ch\"][uri\"/.env\"][unique_id\"ad0uDb0jYYDc4rXD3HtIGwAAAIY\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-01-05 20:17:02 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-25 11:36:48 (5 months ago)	2025-12-25T13:36:47.908821+02:00 zanati wp(www.sahpa.co.za)[2919004]: Blocked authentication attempt ... show more 2025-12-25T13:36:47.908821+02:00 zanati wp(www.sahpa.co.za)[2919004]: Blocked authentication attempt for [email protected] from 216.26.245.199 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:49:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.199 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:49:03.499306 2025] [security2:error] [pid 824:tid 824] [client 216.26.245.199:30177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.billystuff.net"] [uri "/.git/HEAD"] [unique_id "aSU1PyVf9--kDQjDtvcu2wAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:27:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.199 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:27:19.652561 2025] [security2:error] [pid 20211:tid 20211] [client 216.26.245.199:53761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.intermixx.net"] [uri "/.svn/wc.db"] [unique_id "aSPst9GW5RDGSk3FMvzgHQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-02 16:57:58 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:09:42	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2025-10-27 04:02:00 (7 months ago)	2025-10-27T05:01:57.784677 localhost.localdomain sshd[1027069]: pam_unix(sshd:auth): authentication ... show more 2025-10-27T05:01:57.784677 localhost.localdomain sshd[1027069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.26.245.199 2025-10-27T05:01:59.870908 localhost.localdomain sshd[1027069]: Failed password for invalid user [email protected] from 216.26.245.199 port 37761 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-10-08 06:39:30 (8 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-10-03 22:17:44 (8 months ago)	wordpress-trap	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.77.226.240

🇨🇳 183.184.186.249

🇭🇰 152.32.239.122

🇺🇸 152.32.236.157

🇨🇦 147.182.151.244

🇸🇬 140.245.37.160

🇨🇳 117.50.118.246

🇷🇺 94.180.250.11

🇫🇷 51.77.158.34

🇨🇳 222.89.169.98

🇧🇷 201.17.133.138

🇲🇿 197.219.208.58

🇰🇷 195.86.128.141

🇨🇳 182.54.23.217

🇩🇪 167.94.146.55

🇳🇱 138.226.239.12

🇨🇳 113.221.96.127

🇺🇸 107.172.97.144

🇺🇸 100.52.14.225

🇺🇸 100.28.153.226