JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.253.118

216.26.253.118 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.253.118

Whois 216.26.253.118

IP Abuse Reports for 216.26.253.118:

This IP address has been reported a total of 9 times from 9 distinct sources. 216.26.253.118 was first reported on October 16th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-17 04:16:44 (3 days ago)	Web App Attack	Web App Attack
🇫🇮 inlink.ltd	2026-05-15 06:32:55 (1 month ago)	Known malicious PHP file or CMS probe	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-28 05:27:14 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-01-24 10:18:12 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 216.26.253.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 216.26.253.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 24 05:18:07.398899 2026] [security2:error] [pid 10850:tid 10850] [client 216.26.253.118:64885] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|havelocktruckandauto.ca\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "havelocktruckandauto.ca"] [uri "/shop.sql"] [unique_id "aXScXzbqB1wM9yaSIksQUwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-12-28 03:05:04 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇹 VHosting	2025-12-23 16:40:11 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇫🇷 masterguru	2025-11-12 00:05:02 (7 months ago)	(Botnet_distributed) Probably botnet. Call spam script from 216.26.253.118 (FR/France/-): 1 in the l ... show more (Botnet_distributed) Probably botnet. Call spam script from 216.26.253.118 (FR/France/-): 1 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2025-11-01 19:16:25 (7 months ago)	[redacted] 216.26.253.118 - - [01/Nov/2025:20:16:13 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" " ... show more [redacted] 216.26.253.118 - - [01/Nov/2025:20:16:13 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/601.6.17 (KHTML, like Gecko) Version/9.1.1 Safari/537.86.6" [redacted] 216.26.253.118 - - [01/Nov/2025:20:16:14 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; InfoPath.1)" [redacted] 216.26.253.118 - - [01/Nov/2025:20:16:15 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/417.9 (KHTML, like Gecko) Safari/417.8" [redacted] 216.26.253.118 - - [01/Nov/2025:20:16:17 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_4_11; en) AppleWebKit/525.13 (KHTML, like Gecko) Version/3.1 Safari/525.13" [redacted] 216.26.253.118 - - [01/Nov/2025:20:16:18 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Ma ... show less	Hacking Web App Attack
Anonymous	2025-10-16 08:03:58 (8 months ago)	WordPress Brute Force	Brute-Force

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 128.199.64.40

🇨🇿 2a02:598:64:8a00::302:643

🇳🇱 213.177.179.80

🇷🇴 193.32.162.82

🇧🇷 189.33.64.41

🇨🇴 186.98.72.21

🇨🇳 180.119.209.61

🇳🇱 176.65.149.55

🇨🇦 165.245.227.84

🇨🇳 157.255.217.246

🇮🇩 128.14.233.253

🇸🇬 103.250.11.80

🇯🇵 103.125.146.22

🇻🇳 103.75.183.177

🇺🇸 64.62.197.124

🇻🇳 58.186.20.143

🇮🇩 49.0.24.107

🇺🇸 18.190.15.50

🇺🇸 2607:f8b0:4001:c13::129

🇺🇸 209.141.43.146