JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.249.94

216.26.249.94 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.249.94

Whois 216.26.249.94

IP Abuse Reports for 216.26.249.94:

This IP address has been reported a total of 19 times from 11 distinct sources. 216.26.249.94 was first reported on November 24th 2025, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-06-20 01:45:43 (23 hours ago)	216.26.249.94 - - [20/Jun/2026:03:45:43 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubun ... show more 216.26.249.94 - - [20/Jun/2026:03:45:43 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" show less	Hacking Web App Attack
🇳🇿 billyborsht	2026-06-19 21:14:41 (1 day ago)	2026-06-20T09:14:40.882874+12:00 southern wordpress(leanpolicy.org)[1102212]: Authentication attempt ... show more 2026-06-20T09:14:40.882874+12:00 southern wordpress(leanpolicy.org)[1102212]: Authentication attempt for unknown user letmeseehaha from 216.26.249.94 ... show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-05-07 18:52:19 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-52.216.26.249.94.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-52.216.26.249.94.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-05 07:56:53 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-56.216.26.249.94.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-56.216.26.249.94.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-05 03:47:56 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-47.216.26.249.94.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-47.216.26.249.94.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇷🇺 loveprod	2026-02-10 15:01:06 (4 months ago)	216.26.249.94 - - [10/Feb/2026:18:01:06 +0300] "GET /.env.save HTTP/1.1" 301 351 "-" "Mozilla/5.0 (W ... show more 216.26.249.94 - - [10/Feb/2026:18:01:06 +0300] "GET /.env.save HTTP/1.1" 301 351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 216.26.249.94 - - [10/Feb/2026:18:01:06 +0300] "GET http://0ekc2.com/.env.staging HTTP/1.1" 301 357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot
🇺🇸 myagent.site	2026-02-09 21:10:43 (4 months ago)	Blocking for trying to access an exploit file: /frontend/.env	Hacking
🇵🇱 sefinek.net	2026-02-08 14:01:14 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2026-01-19 03:07:15 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-01-05 20:23:35 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇬🇧 relianoid.com	2025-12-27 18:46:51 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇦🇺 MAGIC	2025-12-26 01:15:14 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇱🇻 garmtech.com	2025-12-25 22:51:10 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-51.216.26.249.94.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-51.216.26.249.94.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:40:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.249.94 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.249.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:40:24.292375 2025] [security2:error] [pid 6382:tid 6382] [client 216.26.249.94:45327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.binfieldresources.keyston.net"] [uri "/.svn/wc.db"] [unique_id "aSag2E7MUVcVrHyUGR_jYgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:50:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.249.94 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.249.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:50:11.769990 2025] [security2:error] [pid 19039:tid 19039] [client 216.26.249.94:44867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.iconconstructors.com"] [uri "/.svn/wc.db"] [unique_id "aSaVE3ncUnnQQ_Nb_DJ7hQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.183

🇺🇸 193.3.53.5

🇫🇮 147.185.133.9

🇯🇵 118.194.229.94

🇮🇹 93.92.79.192

🇹🇼 220.135.226.87

🇳🇱 204.76.203.206

🇳🇱 193.176.31.198

🇳🇱 185.223.235.59

🇮🇩 182.253.156.173

🇻🇳 160.191.242.222

🇧🇷 143.95.209.223

🇨🇳 123.157.192.248

🇨🇳 116.179.32.173

🇮🇳 106.221.205.53

🇧🇩 103.26.136.173

🇳🇱 81.19.216.124

🇳🇱 81.19.216.103

🇳🇱 81.19.216.70

🇫🇷 62.169.20.98