JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.252.170

216.26.252.170 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 21%: ?

21%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.252.170

Whois 216.26.252.170

IP Abuse Reports for 216.26.252.170:

This IP address has been reported a total of 15 times from 10 distinct sources. 216.26.252.170 was first reported on October 24th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-06-03 04:54:50 (1 week ago)	Form spam	Web Spam
🇺🇸 getaccessibleapps.com	2026-05-26 13:51:18 (2 weeks ago)		Web Spam
🇱🇻 garmtech.com	2026-05-14 22:41:18 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-41.216.26.252.170.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-41.216.26.252.170.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-11 04:45:39 (4 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-45.216.26.252.170.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-45.216.26.252.170.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-04-19 09:40:56 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-40.216.26.252.170.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-40.216.26.252.170.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-04-12 06:11:25 (1 month ago)	VILICO WEBFORM SPAM 216.26.252.170 (216.26.252.170)	Web Spam
🇦🇺 oncord	2026-04-05 10:23:05 (2 months ago)	Form spam	Web Spam
🇩🇪 stinpriza	2026-01-07 19:50:49 (5 months ago)	Web App Attack	Web App Attack
🇦🇺 MAGIC	2025-12-07 00:03:45 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-24 07:21:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.252.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.252.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:21:09.450846 2025] [security2:error] [pid 13096:tid 13096] [client 216.26.252.170:34087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ahsigns.com"] [uri "/.git/HEAD"] [unique_id "aSQHZZ-MCqruu7KO07m9oQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:56:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.252.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.252.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:55:59.463855 2025] [security2:error] [pid 11061:tid 11061] [client 216.26.252.170:31113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lucid-events.com"] [uri "/.env"] [unique_id "aSPlX-gfDeKsOk9pZiYNIwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-11-09 00:22:15 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-11-02 18:04:39 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:29:56	Port Scan Brute-Force Exploited Host Web App Attack
🇩🇪 cloudmax	2025-10-24 22:22:56 (7 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇩🇪 london2038.com	2025-10-24 11:33:21 (7 months ago)	Connection atttempts against closed TCP ports Oct 24 13:33:14 BLOCK SRC=216.26.252.170 LEN=60 TOS=0x ... show more Connection atttempts against closed TCP ports Oct 24 13:33:14 BLOCK SRC=216.26.252.170 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=15758 DF PROTO=TCP SPT=16261 DPT=22 WINDOW=64240 RES=0x00 SYN Oct 24 13:33:15 BLOCK SRC=216.26.252.170 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=15759 DF PROTO=TCP SPT=16261 DPT=22 WINDOW=64240 RES=0x00 SYN Oct 24 13:33:16 BLOCK SRC=216.26.252.170 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=15760 DF PROTO=TCP SPT=16261 DPT=22 WINDOW=64240 RES=0x00 SYN show less	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.110.147.58

🇰🇷 221.153.50.115

🇳🇱 213.177.179.158

🇵🇰 202.47.36.206

🇭🇰 152.32.128.214

🇮🇳 139.59.30.229

🇵🇭 120.28.148.221

🇨🇳 114.250.59.28

🇰🇷 106.251.244.178

🇨🇮 102.209.220.236

🇷🇴 80.94.92.177

🇮🇹 78.110.184.132

🇹🇼 61.220.235.10

🇳🇱 43.250.54.196

🇺🇸 2600:3c02::2000:c1ff:fe57:cede

🇩🇪 213.209.159.11

🇺🇸 207.90.244.2

🇨🇱 190.46.7.26

🇮🇶 185.206.82.75

🇰🇬 158.181.0.94