JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.249.68

216.26.249.68 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 37%: ?

37%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.249.68

Whois 216.26.249.68

IP Abuse Reports for 216.26.249.68:

This IP address has been reported a total of 12 times from 9 distinct sources. 216.26.249.68 was first reported on November 14th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 poundawebsiteltd	2026-06-25 13:59:44 (1 day ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 216.26.249.68 - - [25/Jun/2026:14:59:38 +0100] P ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 216.26.249.68 - - [25/Jun/2026:14:59:38 +0100] POST /wp-login.php HTTP/1.1 200 7362 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15 show less	Web App Attack
🇨🇴 ingentar	2026-06-25 10:32:56 (1 day ago)	2026-06-25T05:32:22.915427-05:00 web wordpress(ingentar.com)[2503562]: Blocked authentication attemp ... show more 2026-06-25T05:32:22.915427-05:00 web wordpress(ingentar.com)[2503562]: Blocked authentication attempt for root from 216.26.249.68 ... show less	Web App Attack Brute-Force
🇫🇷 ELYAZ	2026-06-25 06:32:07 (1 day ago)	(y4) Failed scan -byebye- from 216.26.249.68 (IT/Italy/-): (CF_ENABLE)	Hacking
🇩🇪 4server	2026-06-23 19:39:30 (3 days ago)	[TueJun2321:39:27.8983592026][security2:error][pid3016842:tid3016902][client216.26.249.68:0]ModSecur ... show more [TueJun2321:39:27.8983592026][security2:error][pid3016842:tid3016902][client216.26.249.68:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"titraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajrg7-ySTR_hc-t3BmA3GQAAAA0\"]\,referer:https://www.google.com/ show less	Port Scan Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-06-14 18:15:22 (1 week ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-09 23:25:00 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.249.68 2026-05 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.249.68 2026-05-09 07:04:05 / 2026-05-09 07:05:25 / show less	Web App Attack
🇱🇻 garmtech.com	2026-03-15 01:17:59 (3 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇺🇸 TPI-Abuse	2026-01-14 22:59:50 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.249.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.249.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 17:59:43.090670 2026] [security2:error] [pid 9733:tid 9733] [client 216.26.249.68:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sportsbookcommission.com"] [uri "/.env"] [unique_id "aWgf3xj01ZZeQKSQYrqZiwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:36:42 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.249.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.249.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:35:57.857294 2025] [security2:error] [pid 7844:tid 7844] [client 216.26.249.68:24137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.blueworkdesign.com"] [uri "/.svn/wc.db"] [unique_id "aSVOTUis5JtIkiVUf3EvuAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:01:28 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.249.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.249.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:01:24.548618 2025] [security2:error] [pid 15589:tid 15617] [client 216.26.249.68:44029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dcs.co.id"] [uri "/.env"] [unique_id "aSUcBCIjVFKa_KFJ49hxmgAAAMw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:49:50 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.249.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.249.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:49:44.716006 2025] [security2:error] [pid 6563:tid 6563] [client 216.26.249.68:57573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cortona.ws"] [uri "/.svn/wc.db"] [unique_id "aSULOLsCyTrs8iOi7IC6XQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 14:49:06 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/14 08:47:17	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 240e:6a0:1fe:6:1::1

🇨🇳 110.249.201.55

🇺🇸 107.150.105.153

🇺🇸 8.231.42.80

🇬🇧 2a06:4880:4000::5f

🇰🇷 220.127.148.6

🇳🇱 176.65.139.218

🇺🇸 172.203.253.208

🇭🇰 165.154.4.92

🇨🇳 110.249.201.76

🇫🇷 104.28.243.187

🇫🇮 193.148.56.79

🇩🇪 188.68.39.92

🇳🇱 178.16.54.93

🇬🇧 51.89.129.75

🇸🇬 47.236.24.189

🇳🇱 45.148.10.121

🇺🇸 45.46.228.140

🇬🇪 2.57.217.229

🇨🇳 218.78.46.81