JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.245.28

216.26.245.28 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.245.28

Whois 216.26.245.28

IP Abuse Reports for 216.26.245.28:

This IP address has been reported a total of 20 times from 16 distinct sources. 216.26.245.28 was first reported on September 29th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-09 00:10:56 (2 weeks ago)	Web App Attack	Web App Attack
🇳🇱 Harm222	2026-06-13 09:20:00 (1 month ago)	Web spamming	Web Spam
🇵🇾 armandosaucedo.me	2026-06-11 07:46:43 (1 month ago)	Threat Intelligence via ARMTI, Web Attack: GET /wp-sitemap.xml	Web App Attack
🇩🇪 filstal.org	2026-05-12 04:57:49 (2 months ago)	Automated security scan or exploit attempt detected by Fail2Ban	Bad Web Bot Web App Attack
Anonymous	2026-05-12 04:29:13 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:46 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇭 backslash	2025-12-24 13:55:03 (7 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 ambor	2025-12-24 01:49:09 (7 months ago)	Honeypot access: WordPress admin access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇮🇹 VHosting	2025-12-24 01:25:04 (7 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇮🇳 Altis Shield	2025-12-01 00:25:55 (7 months ago)	Connection closed by 216.26.245.28 [preauth] or weird packet	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-11-24 07:42:04 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:41:56.605931 2025] [security2:error] [pid 3481526:tid 3481526] [client 216.26.245.28:20289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whenfoodmatters.com.salsberggroup.com"] [uri "/.svn/wc.db"] [unique_id "aSQMRCkEPg4w0NYxhD-3uwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:58:04 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:57:56.305886 2025] [security2:error] [pid 13943:tid 14047] [client 216.26.245.28:23353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.taxelon.com"] [uri "/.git/HEAD"] [unique_id "aSQB9Opgfj-qx9CvqmReTAAAAhE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:07:50 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:07:46.124314 2025] [security2:error] [pid 15592:tid 15592] [client 216.26.245.28:33041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.accentspecialties.com"] [uri "/.git/HEAD"] [unique_id "aSP2MrAH6RhxVWr18edWPQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:03:22 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:03:19.390383 2025] [security2:error] [pid 18325:tid 18347] [client 216.26.245.28:31347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.nicolelmartin.com"] [uri "/.env"] [unique_id "aSPnF7ibCkDUtlE56PAqrwAAAFQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-11-17 09:53:31 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c0d::121

🇨🇳 220.196.160.40

🇺🇸 203.88.119.100

🇦🇷 181.164.12.188

🇺🇸 162.217.100.36

🇱🇰 112.134.221.15

🇺🇸 107.172.157.247

🇷🇺 95.47.246.223

🇻🇳 14.235.51.61

🇬🇧 5.252.83.69

🇮🇳 117.214.56.236

🇨🇳 106.75.173.142

🇵🇱 83.219.248.100

🇬🇧 23.81.36.46

🇺🇸 192.3.48.16

🇬🇧 185.216.145.180

🇳🇬 152.32.140.218

🇨🇳 124.88.113.20

🇳🇱 91.92.47.90

🇫🇷 90.30.92.74