AbuseIPDB » 216.26.254.147
216.26.254.147
This IP was reported 10 times. Confidence of
Abuse
is 31% : ?
ISP
3xK Tech GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS200373
Domain Name
3xktech.cloud
Country
🇩🇪
Germany
City
Berlin, State of Berlin
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 216.26.254.147 :
This IP address has been reported a total of
10
times from
7 distinct
sources.
216.26.254.147 was first reported on
October 6th 2025 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇷
setupgr
2026-06-16 22:46:22
(1 day ago)
(mod_security) mod_security (id:900001) triggered by 216.26.254.147: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:900001) triggered by 216.26.254.147: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 01:46:21.578482 2026] [security2:error] [pid 2210175:tid 2210221] [client 216.26.254.147:39239] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: asteriassantorini.com"] [severity "CRITICAL"] [tag "security"] [hostname "asteriassantorini.com"] [uri "/wp-login.php"] [unique_id "ajHSPX9oGssBgNwsPFslXQAAAEM"], referer: https://asteriassantorini.com/wp-login.php
show less
Port Scan
🇺🇸
lostswordfish.com
2026-06-16 18:56:04
(1 day ago)
Wordfence waf block on 1105merrystreet
Web App Attack
🇫🇷
pm33
2026-06-16 17:37:47
(1 day ago)
Wordpress login attempts
Brute-Force
🇬🇷
setupgr
2026-06-15 22:17:40
(2 days ago)
(mod_security) mod_security (id:900001) triggered by 216.26.254.147: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:900001) triggered by 216.26.254.147: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 01:17:40.006215 2026] [security2:error] [pid 1917071:tid 1917254] [client 216.26.254.147:29017] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.ions.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.ions.gr"] [uri "/wp-login.php"] [unique_id "ajB6BHbrIXpbmq-1FoWmogAAAQQ"], referer: https://mail.ions.gr/wp-login.php
show less
Port Scan
🇫🇷
ELYAZ
2026-06-13 20:23:01
(4 days ago)
(y4) Failed scan -byebye- from 216.26.254.147 (FR/France/-): (CF_ENABLE)
Hacking
🇺🇸
dtorrer
2026-06-11 22:20:44
(6 days ago)
Brute-force general attack.
Brute-Force
🇫🇷
ELYAZ
2026-06-10 15:56:22
(1 week ago)
(y4) Failed scan -byebye- from 216.26.254.147 (FR/France/-): (CF_ENABLE)
Hacking
🇨🇭
backslash
2025-12-01 01:05:07
(6 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-10-07 23:18:24
(8 months ago)
wordpress-trap
Web App Attack
2025-10-06 06:09:46
(8 months ago)
wordpress-trap
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: