JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.245.55

216.26.245.55 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 10%: ?

10%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.245.55

Whois 216.26.245.55

IP Abuse Reports for 216.26.245.55:

This IP address has been reported a total of 23 times from 9 distinct sources. 216.26.245.55 was first reported on September 27th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-10 02:07:04 (3 weeks ago)	Web App Attack	Web App Attack
🇳🇴 jad-abuse	2026-08-05 01:27:31 (3 weeks ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 1 hits. show less	Brute-Force Web App Attack
🇫🇷 Sklurk	2026-08-05 00:12:29 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-04 00:10:56 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-29 02:46:28 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 13:03:22 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 08:03:17.156731 2026] [security2:error] [pid 31598:tid 31598] [client 216.26.245.55:45857] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.easternimport.com\|F\|4"] [data "close, keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.easternimport.com"] [uri "/products.php"] [unique_id "aW99FctyXqpsKF4EeTIJaQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-11 06:51:45 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 11 01:51:38.589046 2026] [security2:error] [pid 20981:tid 20981] [client 216.26.245.55:58857] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|genesis-castle.com\|F\|2"] [data ".ini.ea3.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "genesis-castle.com"] [uri "/php.ini.ea3.bak"] [unique_id "aWNIeokDAqAPHsNxID2XAQAAAAU"], referer: http://genesis-castle.com show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 hostseries	2025-12-24 05:31:59 (8 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 00:01:48 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:01:42.604651 2025] [security2:error] [pid 24354:tid 24354] [client 216.26.245.55:12097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.xcengineering.xyz"] [uri "/.git/HEAD"] [unique_id "aSZDZqDqDsQm2SIXqBOR6AAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:40:58 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:40:42.766344 2025] [security2:error] [pid 31424:tid 31424] [client 216.26.245.55:22395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.printorganic.com"] [uri "/.git/HEAD"] [unique_id "aSVBWlJtlr2ovrx9XIxRnAAAAEY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:56:07 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:56:01.620861 2025] [security2:error] [pid 15578:tid 15578] [client 216.26.245.55:57983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.studioyau.com"] [uri "/.git/HEAD"] [unique_id "aSU24R0r6e_lTFS9TONJOgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:37:33 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:37:29.412046 2025] [security2:error] [pid 32110:tid 32110] [client 216.26.245.55:38173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.networthbuilding.com"] [uri "/.git/HEAD"] [unique_id "aSUyicmRH7Cv77sW2W2-DwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:21:08 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:20:51.448290 2025] [security2:error] [pid 7213:tid 7213] [client 216.26.245.55:10061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.dougallbaillie.com"] [uri "/.svn/wc.db"] [unique_id "aST2Y6Zs1iwgTMD_kXWU4AAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:23:33 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:23:25.642322 2025] [security2:error] [pid 243933:tid 244011] [client 216.26.245.55:43971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.iancaird.com"] [uri "/.git/HEAD"] [unique_id "aSQkDdmGQHQ5UZm-z0BhNwAAAdA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:10:50 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.245.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:10:42.890158 2025] [security2:error] [pid 25719:tid 25719] [client 216.26.245.55:55033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.digitaltom.net"] [uri "/.env"] [unique_id "aSQTAhCbJ8jLVm-Z90rGMAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.230

192.168.90.159

🇺🇸 147.185.132.54

🇺🇸 136.108.13.177

🇺🇸 104.220.35.174

🇸🇬 103.250.11.116

100.98.177.196

🇺🇸 99.6.241.110

🇱🇹 62.60.130.201

🇧🇷 43.157.174.69

10.167.16.7

🇧🇷 181.233.18.22

🇨🇳 123.165.86.211

🇹🇭 101.108.70.46

🇺🇸 66.132.186.252

🇺🇸 34.73.91.3

🇺🇸 2607:f8b0:400c:c16::12b

🇦🇷 190.220.172.154

172.27.92.211

172.16.226.180