JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.247.58

216.26.247.58 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.247.58

Whois 216.26.247.58

IP Abuse Reports for 216.26.247.58:

This IP address has been reported a total of 20 times from 11 distinct sources. 216.26.247.58 was first reported on November 25th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2026-06-10 16:22:24 (1 day ago)	Wordpress login attempts	Brute-Force
🇫🇷 solution.it	2026-05-16 00:04:03 (3 weeks ago)	[Sat May 16 02:04:02.743531 2026] [php7:error] [pid 3869268:tid 3869268] [client 216.26.247.58:62145 ... show more [Sat May 16 02:04:02.743531 2026] [php7:error] [pid 3869268:tid 3869268] [client 216.26.247.58:62145] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇱🇻 garmtech.com	2026-05-09 12:31:18 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-31.216.26.247.58.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-31.216.26.247.58.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-03-03 07:06:46 (3 months ago)	"GET /.git/HEAD HTTP/1.1"	Hacking Web App Attack
🇵🇱 sefinek.net	2026-02-15 03:41:55 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-01-05 20:17:42 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇮🇩 sockominfo	2025-12-31 20:05:21 (5 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Email Spam Hacking
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:59:02 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 etu brutus	2025-12-20 14:25:42 (5 months ago)	216.26.247.58 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-12-07 15:40:12 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-40.216.26.247.58.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-40.216.26.247.58.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2025-12-07 07:28:51 (6 months ago)	wordpress-trap	Web App Attack
🇱🇻 garmtech.com	2025-12-05 11:26:07 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-26.216.26.247.58.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-26.216.26.247.58.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 01:53:59 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 216.26.247.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 216.26.247.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 20:53:52.613900 2025] [security2:error] [pid 21880:tid 21880] [client 216.26.247.58:38161] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|abundantwork.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "abundantwork.com"] [uri "/dump.sql"] [unique_id "aSpSMImSCmenWON9zfwPjQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 20:07:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.247.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.247.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 15:07:26.097406 2025] [security2:error] [pid 23948:tid 23948] [client 216.26.247.58:12319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aarce.me"] [uri "/wp-config.txt"] [unique_id "aSoA_pIHSjg6fv__ZkFHZAAAAA0"], referer: http://aarce.com/wp-config.txt show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 19:22:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.247.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.247.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:22:09.612771 2025] [security2:error] [pid 17877:tid 17877] [client 216.26.247.58:14199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arapi.org"] [uri "/.svn/wc.db"] [unique_id "aSik4Qu-JBMj7m5dpKctvQAAACc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.248.3.92

🇮🇳 125.21.59.218

🇷🇴 80.94.92.177

🇨🇳 60.212.48.99

🇮🇳 45.40.57.172

🇩🇪 194.187.176.208

🇮🇹 185.15.171.51

🇧🇪 104.199.4.112

🇮🇳 103.107.60.45

🇷🇴 92.118.39.236

🇩🇪 69.5.169.219

🇩🇪 69.5.169.165

🇵🇪 190.42.242.178

🇺🇸 172.234.25.243

🇯🇵 168.138.213.115

🇺🇸 167.99.113.23

🇬🇧 165.22.113.99

🇺🇸 162.216.149.247

🇨🇳 113.65.94.121

🇺🇸 91.230.168.165