JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.249.234

216.26.249.234 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 48%: ?

48%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.249.234

Whois 216.26.249.234

IP Abuse Reports for 216.26.249.234:

This IP address has been reported a total of 12 times from 11 distinct sources. 216.26.249.234 was first reported on October 28th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-02 04:15:02 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇹 Malta	2026-07-01 18:40:23 (2 days ago)	216.26.249.234 - - [01/Jul/2026:20:40:23 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ... show more 216.26.249.234 - - [01/Jul/2026:20:40:23 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 Choice Tech LLC	2026-07-01 16:40:07 (2 days ago)	Blocked by OPNsense firewall; 9 hits, proto=tcp, ports=80	Port Scan Hacking
🇳🇿 billyborsht	2026-07-01 15:36:10 (2 days ago)	2026-07-02T03:36:08.779960+12:00 southern wordpress(abrahamic.nz)[1835737]: Authentication attempt f ... show more 2026-07-02T03:36:08.779960+12:00 southern wordpress(abrahamic.nz)[1835737]: Authentication attempt for unknown user [email protected] from 216.26.249.234 ... show less	Hacking Web App Attack
🇫🇷 tecnicorioja	2026-06-25 22:01:43 (1 week ago)	wp-login attack [25/Jun/2026:11:13:29	Brute-Force Web App Attack
🇫🇷 pm33	2026-06-24 22:28:55 (1 week ago)	Wordpress login attempts	Brute-Force
🇫🇷 ELYAZ	2026-06-22 19:57:48 (1 week ago)	(y4) Failed scan -byebye- from 216.26.249.234 (IT/Italy/-): (CF_ENABLE)	Hacking
🇬🇧 poundawebsiteltd	2026-06-21 00:54:59 (1 week ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 216.26.249.234 - - [21/Jun/2026:01:54:52 +0100] ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 216.26.249.234 - - [21/Jun/2026:01:54:52 +0100] POST /wp-login.php HTTP/1.1 200 7139 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:120.0) Gecko/20100101 Firefox/120.0 show less	Web App Attack
🇺🇸 myagent.site	2026-02-09 07:18:54 (4 months ago)	Blocking for trying to access an exploit file: /app/.git/config	Hacking
Anonymous	2026-01-05 20:38:41 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-10-31 15:58:28 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 216.26.249.234 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 216.26.249.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 11:58:23.642749 2025] [security2:error] [pid 32531:tid 32531] [client 216.26.249.234:11365] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|indyham.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "indyham.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQTcn6cbq86F_zGvPal8EAAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-28 14:18:09 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 216.26.249.234 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 216.26.249.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 10:18:04.177094 2025] [security2:error] [pid 2796:tid 2796] [client 216.26.249.234:23839] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|serpentstudios.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "serpentstudios.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQDQnAL5nZMX1SX06uBCAAAAAAk"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 139.99.74.35

🇸🇬 185.150.0.210

🇳🇱 176.65.148.185

🇧🇬 151.237.6.220

🇷🇴 92.118.39.49

🇳🇱 89.21.67.149

🇳🇱 45.66.35.23

🇧🇪 34.22.113.49

🇳🇱 213.152.185.117

🇺🇸 86.111.176.100

🇱🇺 64.89.161.112

🇳🇱 45.198.224.5

🇬🇧 35.203.210.218

🇺🇸 20.163.58.125

🇵🇰 223.123.73.239

🇧🇷 190.89.137.55

🇺🇸 173.76.116.4

🇺🇸 172.235.40.131

🇨🇳 144.123.77.28

🇵🇰 103.141.5.89