JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.246.126

216.26.246.126 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.246.126

Whois 216.26.246.126

IP Abuse Reports for 216.26.246.126:

This IP address has been reported a total of 20 times from 9 distinct sources. 216.26.246.126 was first reported on October 14th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇴 adalbertoreyes.org	2026-07-10 21:23:15 (8 hours ago)	CategoryPortScan	Port Scan
🇩🇪 iNetWorker	2026-07-05 17:43:46 (5 days ago)	trolling for resource vulnerabilities	Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇩🇪 F242	2026-01-30 05:08:00 (5 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
Anonymous	2026-01-05 20:14:44 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 SSH-Admin	2025-12-27 22:05:38 (6 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇨🇴 directorioeducativo.com	2025-12-10 11:34:30 (7 months ago)	GET URL: "/.env"Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/1 ... show more GET URL: "/.env"Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 03:50:20 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 22:50:12.918356 2025] [security2:error] [pid 32550:tid 32550] [client 216.26.246.126:46793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theopinionatedowl.com"] [uri "/.env"] [unique_id "aTZK9HrGab2AaYY3VBv-IgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 20:09:53 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 15:08:50.047077 2025] [security2:error] [pid 6107:tid 6107] [client 216.26.246.126:18883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roselockecasting.com"] [uri "/.git/HEAD"] [unique_id "aTXe0lmWmqF9yfNXp6KxYwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 11:31:09 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:31:02.404028 2025] [security2:error] [pid 507:tid 507] [client 216.26.246.126:47965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrisea.net"] [uri "/.env"] [unique_id "aTQT9pBNIP9YIdjTYdH67AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 00:30:15 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 19:30:09.678277 2025] [security2:error] [pid 19174:tid 19174] [client 216.26.246.126:59331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nealschon.global"] [uri "/.svn/wc.db"] [unique_id "aTN5EeawIfZh3CN1mA4qVwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:46:08 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:46:02.703373 2025] [security2:error] [pid 32166:tid 32166] [client 216.26.246.126:12277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marthasvineyardweddingideas.com"] [uri "/.env"] [unique_id "aTK36ls_ZMioxEnIVHmNCwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:22:05 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:21:58.696205 2025] [security2:error] [pid 22257:tid 22257] [client 216.26.246.126:16777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wiltoncheese.com"] [uri "/.svn/wc.db"] [unique_id "aTKyRpHcCCsnWzu1q1fS1gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 09:46:05 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:46:01.808499 2025] [security2:error] [pid 14560:tid 14560] [client 216.26.246.126:22911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hunkworkout.com"] [uri "/.git/HEAD"] [unique_id "aTKp2dytI9IXr8LXPmQzpwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 21:44:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.246.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 16:44:13.665580 2025] [security2:error] [pid 9690:tid 9690] [client 216.26.246.126:24947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fredlandia.com"] [uri "/.svn/wc.db"] [unique_id "aSjGLfwDaS0CdMan38EbkwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 23.48.249.148

🇳🇱 193.176.31.213

🇨🇴 190.85.11.150

🇬🇧 154.16.44.90

🇰🇷 118.37.217.122

🇳🇱 89.21.67.160

🇩🇪 69.5.169.111

🇩🇪 69.5.169.110

🇩🇪 69.5.169.72

🇩🇪 69.5.169.51

🇩🇪 69.5.169.42

🇺🇸 64.62.156.170

🇨🇳 58.49.26.202

🇺🇸 2607:f8b0:4004:c25::120

🇮🇳 2401:4900:8925:8b86:a47a:deda:69d7:dbfa

🇺🇸 172.202.118.45

🇹🇭 161.82.146.86

🇨🇳 113.201.90.14

🇩🇪 69.5.169.48

🇩🇪 212.30.36.36