JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.254.227

216.26.254.227 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 31%: ?

31%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.254.227

Whois 216.26.254.227

IP Abuse Reports for 216.26.254.227:

This IP address has been reported a total of 26 times from 11 distinct sources. 216.26.254.227 was first reported on November 13th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 directorioeducativo.com	2026-07-19 17:49:28 (4 days ago)	GET URL: "/.git/HEAD"Agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHT ... show more GET URL: "/.git/HEAD"Agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.110 Safari/537.36 Vivaldi/2.7.1628.30" show less	Web App Attack
🇺🇸 dtorrer	2026-06-27 04:25:01 (3 weeks ago)	Brute-force general attack.	Brute-Force
🇩🇪 FeG Deutschland	2026-06-26 11:26:20 (4 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇮 6kilowatti	2026-06-26 08:52:46 (4 weeks ago)	216.26.254.227 - - [26/Jun/2026:11:52:46 +0300] "POST /wp-login.php HTTP/1.1" 404 12994 "https://oh6 ... show more 216.26.254.227 - - [26/Jun/2026:11:52:46 +0300] "POST /wp-login.php HTTP/1.1" 404 12994 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 216.26.254.227 - [26/Jun/2026:11:52:46 +0300] "POST /wp-login.php HTTP/1.1" 404 12288 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" ... show less	Web App Attack
🇲🇹 Malta	2026-06-24 16:06:42 (1 month ago)	216.26.254.227 - - [24/Jun/2026:18:06:41 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 216.26.254.227 - - [24/Jun/2026:18:06:41 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇲🇽 octageeks.com	2026-06-24 04:07:34 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇬🇧 poundawebsiteltd	2026-06-22 04:11:12 (1 month ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 216.26.254.227 - - [22/Jun/2026:05:11:10 +0100] ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 216.26.254.227 - - [22/Jun/2026:05:11:10 +0100] POST /wp-login.php HTTP/1.1 301 3456 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇲🇹 Malta	2026-06-15 06:17:44 (1 month ago)	216.26.254.227 - - [15/Jun/2026:08:17:44 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubu ... show more 216.26.254.227 - - [15/Jun/2026:08:17:44 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇫🇷 ELYAZ	2026-06-13 20:22:51 (1 month ago)	(y4) Failed scan -byebye- from 216.26.254.227 (FR/France/-): (CF_ENABLE)	Hacking
🇫🇷 ELYAZ	2026-06-09 20:34:53 (1 month ago)	(y4) Failed scan -byebye- from 216.26.254.227 (FR/France/-): (CF_ENABLE)	Hacking
🇺🇸 nowyouknow	2026-01-01 14:26:08 (6 months ago)	(From [email protected]) Hi, If you could hire a full-time Digital Marketing Assistant for ... show more (From [email protected]) Hi, If you could hire a full-time Digital Marketing Assistant for less than the cost of a single ad campaign, would you consider it? We offer trained, dedicated staff who handle SEO, Google & Meta Ads, Email Marketing, Social Media Management, order tasks, and more—working 8+ hours per day for only $250/month. Your first month is completely free. Fill the form below to begin your free trial Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSdfVsEbHZ8ONCILtiWxC8Nz4dMDX4XytsWbDm9ZehvJq0dshA/viewform GLE Link to Google Forms: https://forms.gle/hUcK6pGk3DeYNonL7 Short link: https://shorturl.at/sIc0l show less	Phishing Web Spam
🇺🇸 oncord	2025-12-23 16:01:21 (7 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-11-26 16:34:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 11:34:20.753043 2025] [security2:error] [pid 7783:tid 7783] [client 216.26.254.227:20191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.customdesignsbybjp.com"] [uri "/.env"] [unique_id "aScsDFXpPc4Pyt-RmKX-IAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:02:13 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:02:05.364233 2025] [security2:error] [pid 24362:tid 24362] [client 216.26.254.227:42623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.puckerbottombikini.com"] [uri "/.git/HEAD"] [unique_id "aSVUbbhXGKkGUXUFJe2SuQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:38:46 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:38:38.038580 2025] [security2:error] [pid 20418:tid 20418] [client 216.26.254.227:39847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kv-10.com"] [uri "/.git/HEAD"] [unique_id "aSVO7gD2tnnae6Te9T50VQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.127.176.215

🇳🇱 185.93.89.36

🇺🇸 172.253.0.29

🇩🇪 167.94.145.21

🇮🇳 122.160.15.31

🇨🇳 116.231.170.1

🇳🇴 51.120.70.186

🇳🇱 45.148.10.157

🇬🇧 198.244.168.171

🇰🇷 118.43.202.68

🇲🇲 103.233.206.154

🇨🇮 102.67.245.184

🇳🇱 45.153.34.15

🇩🇪 8.211.45.194

🇫🇷 91.231.89.195

🇩🇪 57.129.48.19

🇺🇸 43.130.67.6

🇨🇳 27.155.92.28

🇻🇳 27.79.41.229

🇧🇷 177.125.98.144