JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.249.106

216.26.249.106 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 33%: ?

33%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.249.106

Whois 216.26.249.106

IP Abuse Reports for 216.26.249.106:

This IP address has been reported a total of 37 times from 22 distinct sources. 216.26.249.106 was first reported on October 16th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-19 09:42:42 (2 days ago)	[SunJul1911:42:38.9551512026][security2:error][pid392557:tid392566][client216.26.249.106:0]ModSecuri ... show more [SunJul1911:42:38.9551512026][security2:error][pid392557:tid392566][client216.26.249.106:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"agilityrossoblu.ch\"][uri\"/wp-login.php\"][unique_id\"alycDpgtFehV0R2_RiDKmAAAAEU\"]\,referer:https://agilityrossoblu.ch/wp-login.php show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-16 03:20:32 (5 days ago)	2026-07-16T05:20:31.697128+02:00 aion wordpress[256333]: XML-RPC authentication attempt for unknown ... show more 2026-07-16T05:20:31.697128+02:00 aion wordpress[256333]: XML-RPC authentication attempt for unknown user Beary from 216.26.249.106 ... show less	Hacking Brute-Force
🇺🇸 lostswordfish.com	2026-07-10 15:10:05 (1 week ago)	Wordfence waf block on registrymatters	Web App Attack
🇫🇷 Sklurk	2026-07-09 00:29:59 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-07 17:28:43 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 ELYAZ	2026-06-25 06:33:40 (3 weeks ago)	(y4) Failed scan -byebye- from 216.26.249.106 (IT/Italy/-): (CF_ENABLE)	Hacking
🇫🇷 Yepngo	2026-06-24 05:56:32 (3 weeks ago)	216.26.249.106 - - [24/Jun/2026:07:56:06 +0200] "POST /wp-login.php HTTP/2.0" 200 11376 "https://blo ... show more 216.26.249.106 - - [24/Jun/2026:07:56:06 +0200] "POST /wp-login.php HTTP/2.0" 200 11376 "https://blog.yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 216.26.249.106 - - [24/Jun/2026:07:56:31 +0200] "POST /wp-login.php HTTP/2.0" 200 11376 "https://blog.yepngo.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" ... show less	Brute-Force Web App Attack
🇲🇹 Malta	2026-05-17 15:49:11 (2 months ago)	216.26.249.106 - - [17/May/2026:17:49:10 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 216.26.249.106 - - [17/May/2026:17:49:10 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" show less	Hacking Web App Attack
🇩🇪 0x44	2026-02-13 07:13:06 (5 months ago)	216.26.249.106 [13/Feb/2026] * Spam host detected, probing for vulnerabilities	Web Spam Exploited Host Web App Attack
🇩🇪 BlueWire Hosting	2026-02-13 03:34:26 (5 months ago)	Probing websites for vulnerabilities	SQL Injection Web App Attack
🇺🇸 myagent.site	2026-02-12 02:37:11 (5 months ago)	Blocking for trying to access an exploit file: /backend/.env	Hacking
🇫🇷 mrcrassi	2026-01-24 10:08:49 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-01-05 20:34:42 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-04 06:49:46 (7 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-27 11:29:17 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.249.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.249.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 06:29:11.116237 2025] [security2:error] [pid 4046:tid 4046] [client 216.26.249.106:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.hondabvi.com"] [uri "/.svn/wc.db"] [unique_id "aSg2B4QC7dTIF9MbNugDzgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.118

🇧🇷 187.110.238.50

🇸🇬 47.236.172.167

🇺🇸 20.169.106.201

🇧🇷 205.210.31.233

🇿🇦 185.132.186.20

🇨🇴 179.32.222.55

🇺🇸 172.67.193.135

🇺🇸 104.28.233.73

🇮🇳 103.170.91.249

🇺🇸 35.254.197.7

🇦🇺 35.189.45.186

🇭🇰 20.24.201.131

🇺🇸 104.164.178.193

🇨🇦 85.217.149.55

🇩🇪 57.129.47.135

🇺🇸 45.33.84.124

🇫🇮 35.228.80.223

🇺🇸 35.227.145.84

🇯🇵 35.187.199.63