JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.245.218

216.26.245.218 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.245.218

Whois 216.26.245.218

IP Abuse Reports for 216.26.245.218:

This IP address has been reported a total of 14 times from 11 distinct sources. 216.26.245.218 was first reported on October 11th 2025, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-06-19 11:16:50 (21 hours ago)	216.26.245.218 - - [19/Jun/2026:13:16:49 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 216.26.245.218 - - [19/Jun/2026:13:16:49 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇳🇿 billyborsht	2026-06-19 00:38:17 (1 day ago)	2026-06-19T12:38:16.832779+12:00 southern wordpress(kate.frykberg.co.nz)[1050355]: Authentication at ... show more 2026-06-19T12:38:16.832779+12:00 southern wordpress(kate.frykberg.co.nz)[1050355]: Authentication attempt for unknown user admin from 216.26.245.218 ... show less	Hacking Web App Attack
🇬🇷 setupgr	2026-06-15 16:54:39 (4 days ago)	(mod_security) mod_security (id:900001) triggered by 216.26.245.218: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 216.26.245.218: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 19:54:38.886943 2026] [security2:error] [pid 1917071:tid 1917265] [client 216.26.245.218:52071] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: setworldup.com"] [severity "CRITICAL"] [tag "security"] [hostname "setworldup.com"] [uri "/wp-login.php"] [unique_id "ajAuTnbrIXpbmq-1FoWCfQAAAQ8"], referer: https://setworldup.com/wp-login.php show less	Port Scan
🇺🇸 myagent.site	2026-02-13 03:25:45 (4 months ago)	Blocking for trying to access an exploit file: /backend/.env	Hacking
🇺🇸 mnsf	2026-02-13 03:06:48 (4 months ago)	Scanning/Probing (24)	Brute-Force Web App Attack
Anonymous	2026-01-05 20:20:24 (5 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 nowyouknow	2025-11-28 04:28:35 (6 months ago)	(From [email protected]) Hello, Greetings from United Electrical Contractors. ... show more (From [email protected]) Hello, Greetings from United Electrical Contractors. After reviewing your services, we are interested in sourcing materials/services from your organization for an upcoming project. I am reaching out to confirm your company’s current capacity, as we have a project starting soon. Please provide a quotation for your services so we can proceed with our planning. Additionally, kindly review the attached document and let us know if you have any questions or updates regarding feasibility or capabilities. We are ready to move forward once we receive your feedback. Regards, Mckee Sean show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-11-25 06:57:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.218 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:56:55.008089 2025] [security2:error] [pid 25717:tid 25717] [client 216.26.245.218:15595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.decisionsciencevideos.com"] [uri "/.svn/wc.db"] [unique_id "aSVTN-68nrVQ9WLvZSMazAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:11:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.218 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:11:53.846349 2025] [security2:error] [pid 7092:tid 7092] [client 216.26.245.218:13309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eandgenergy.com"] [uri "/.env"] [unique_id "aSU6mTj-eSEicS3o6ArWIAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:13:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.218 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:13:46.138127 2025] [security2:error] [pid 20206:tid 20206] [client 216.26.245.218:42033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.poland-yacht-registration.com"] [uri "/.svn/wc.db"] [unique_id "aSUs-iHAref-PJTC2LzIZwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-11-19 08:10:09 (7 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
🇩🇪 Ad Ministrator	2025-10-22 15:34:21 (7 months ago)	RdpGuard detected brute-force attempt on RD-WEB	Brute-Force
🇩🇪 Ad Ministrator	2025-10-17 12:20:19 (8 months ago)	RdpGuard detected brute-force attempt on RD-WEB	Brute-Force
Anonymous	2025-10-11 15:29:57 (8 months ago)	Trawling for Open Source CMS installs	Hacking Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 169.224.38.50

🇺🇸 165.154.182.12

🇻🇳 160.250.181.54

🇮🇳 103.171.46.96

🇺🇸 45.79.207.98

🇺🇸 43.153.57.122

🇳🇱 178.62.249.175

🇧🇷 144.22.238.238

🇨🇳 121.40.218.238

🇹🇭 118.194.251.101

🇳🇱 93.123.72.183

🇨🇦 85.217.149.61

🇺🇸 67.207.93.64

🇺🇸 44.172.74.226

🇨🇳 1.27.251.252

🇸🇴 197.231.202.201

🇦🇷 190.104.254.91

🇮🇳 182.68.131.245

🇺🇸 172.105.128.12

🇫🇮 147.185.133.175