JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.253.77

216.26.253.77 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.253.77

Whois 216.26.253.77

IP Abuse Reports for 216.26.253.77:

This IP address has been reported a total of 16 times from 11 distinct sources. 216.26.253.77 was first reported on October 29th 2025, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 webgobe	2026-07-15 09:38:13 (23 hours ago)	wew-Joomla User : try to access forms...	Hacking
🇫🇮 inlink.ltd	2026-07-04 08:34:08 (1 week ago)	Known malicious PHP file or CMS probe	Web App Attack
🇩🇪 FeG Deutschland	2026-06-16 21:33:06 (4 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 dispaisyenterprises	2026-06-15 03:21:48 (1 month ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 1881 HEAD / Accept: /; 1881 [1] TCP Reported by D ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 1881 HEAD / Accept: /; 1881 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇧🇪 cmbplf	2026-05-30 19:05:36 (1 month ago)	989 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 myagent.site	2026-02-10 02:25:24 (5 months ago)	Blocking for trying to access an exploit file: /frontend/.env	Hacking
🇺🇸 myagent.site	2026-02-10 01:16:29 (5 months ago)	Blocking for trying to access an exploit file: /api/.env	Hacking
🇵🇱 sefinek.net	2026-02-03 12:08:24 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12.5; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-14 20:14:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 15:13:55.895067 2026] [security2:error] [pid 1279502:tid 1279521] [client 216.26.253.77:34841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inal.org"] [uri "/.svn/wc.db"] [unique_id "aWf5A4G9POMeRCBIr_ZOwgAAAE4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-13 12:34:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 07:34:12.379531 2026] [security2:error] [pid 22752:tid 22752] [client 216.26.253.77:11803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "habakkukent.com"] [uri "/.svn/wc.db"] [unique_id "aWY7xPIeeeHhoUlHm-8B0QAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-01-12 19:40:56 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2025-12-08 00:18:49 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-27 22:44:16 (7 months ago)	(mod_security) mod_security (id:210740) triggered by 216.26.253.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210740) triggered by 216.26.253.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 17:43:32.842296 2025] [security2:error] [pid 8241:tid 8241] [client 216.26.253.77:34919] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.powerastronomy.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.powerastronomy.com"] [uri "/Runequest/"] [unique_id "aSjUFKyYHFOxFHLXnrkzMwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-11-24 07:23:03 (7 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-11-19 04:44:11 (7 months ago)	(mod_security) mod_security (id:210740) triggered by 216.26.253.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210740) triggered by 216.26.253.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 23:44:06.376443 2025] [security2:error] [pid 18764:tid 18764] [client 216.26.253.77:13717] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|twinls.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "twinls.com"] [uri "/"] [unique_id "aR1LFpVDeR7f1Fopn4SCRwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 46.101.77.4

🇧🇷 168.181.181.102

🇺🇸 162.216.149.190

🇩🇪 159.65.120.213

🇸🇬 101.47.27.73

🇫🇷 91.196.152.240

🇺🇸 44.216.175.115

🇺🇸 34.138.198.0

🇹🇼 198.235.24.30

🇺🇸 186.247.37.89

🇰🇭 118.67.205.38

🇺🇸 85.239.151.34

🇰🇷 59.15.58.148

🇳🇱 45.148.10.152

🇳🇱 45.148.10.147

🇧🇪 34.156.44.229

🇰🇷 222.122.179.118

🇭🇰 199.45.154.129

🇺🇸 156.110.127.83

🇨🇳 121.228.3.255