JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.249.117

216.26.249.117 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.249.117

Whois 216.26.249.117

IP Abuse Reports for 216.26.249.117:

This IP address has been reported a total of 11 times from 9 distinct sources. 216.26.249.117 was first reported on October 29th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 F242	2026-06-20 11:25:51 (1 day ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇳🇿 billyborsht	2026-06-19 21:14:07 (1 day ago)	2026-06-20T09:14:06.053625+12:00 southern wordpress(leanpolicy.org)[1101998]: Authentication attempt ... show more 2026-06-20T09:14:06.053625+12:00 southern wordpress(leanpolicy.org)[1101998]: Authentication attempt for unknown user [email protected] from 216.26.249.117 ... show less	Hacking Web App Attack
Anonymous	2026-01-05 20:28:06 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇵🇱 sefinek.net	2025-11-25 16:05:54 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-24 08:15:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.249.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.249.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:14:48.165299 2025] [security2:error] [pid 134161:tid 134248] [client 216.26.249.117:46477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.bluetigertees.com"] [uri "/.git/HEAD"] [unique_id "aSQT-BfbvyHppNR9RqKsvwAAAJQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:05:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.249.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.249.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:05:11.203023 2025] [security2:error] [pid 22956:tid 22956] [client 216.26.249.117:28657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sparler.com"] [uri "/.svn/wc.db"] [unique_id "aSP1l64yUwWGZj8iFOeDvwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:50:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.249.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.249.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:50:40.653707 2025] [security2:error] [pid 32309:tid 32309] [client 216.26.249.117:31311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ricketyshack.ca"] [uri "/.env"] [unique_id "aSPkIFv_h3_XLo-1rCsz4AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-02 14:04:01 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:02:19	Port Scan Brute-Force Exploited Host Web App Attack
🇫🇷 applemooz	2025-11-01 10:39:25 (7 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
Anonymous	2025-10-30 14:58:51 (7 months ago)	WordPress Brute Force	Brute-Force
🇦🇺 AWW-Admin	2025-10-29 12:21:24 (7 months ago)	(wordpress) Failed wordpress login from 216.26.249.117 (IT/Italy/-)	Brute-Force

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.102.110.144

🇧🇬 87.121.10.180

🇨🇳 58.212.237.206

🇩🇪 47.254.154.160

🇩🇪 47.245.143.217

🇨🇴 45.230.33.135

🇺🇸 2600:1f18:3aea:7000:360a:7a86:f06e:51c2

🇩🇪 213.209.159.238

🇫🇮 178.20.210.151

🇧🇷 177.130.118.46

🇺🇸 172.86.114.38

🇺🇸 162.216.149.194

🇺🇸 150.136.214.177

🇷🇴 141.98.83.240

🇨🇳 122.114.255.230

🇺🇸 107.174.119.178

🇩🇪 88.214.25.121

🇺🇸 68.183.132.211

🇺🇸 64.62.156.203

🇺🇸 34.169.230.53