JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.254.24

216.26.254.24 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 32%: ?

32%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.254.24

Whois 216.26.254.24

IP Abuse Reports for 216.26.254.24:

This IP address has been reported a total of 25 times from 15 distinct sources. 216.26.254.24 was first reported on November 16th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-08-31 14:21:44 (1 day ago)	(wplogin_block) Blocked WP-Login Access Attempt 216.26.254.24 (FR/France/Ãle-de-France/Paris/-/[AS2 ... show more (wplogin_block) Blocked WP-Login Access Attempt 216.26.254.24 (FR/France/Ãle-de-France/Paris/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.26.254.24 - - [31/Aug/2026:17:20:05 +0300] "POST /wp-login.php HTTP/1.1" 503 7448 "https://villa-izabela.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Port Scan
🇩🇪 F242	2026-08-29 19:48:41 (3 days ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇩🇪 FeG Deutschland	2026-08-19 01:37:21 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇫🇷 Sklurk	2026-08-17 23:59:30 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-10 06:13:33 (3 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-07-29 07:00:00 (1 month ago)	Apache probe; attempts=17; exact paths: /xmlrpc.php	Web App Attack
🇲🇽 Centynova Corp.	2026-07-17 07:49:06 (1 month ago)	Blocked by threat detection service. Centynova Security [Fuerza bruta y Ataque a servicios web]	Brute-Force Web App Attack
🇬🇧 PeravixGroup	2026-05-22 13:18:53 (3 months ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇮🇩 Burayot	2026-05-13 20:52:45 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.26.254.24 (FR/France/-): 2 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.26.254.24 (FR/France/-): 2 in the last 3600 secs show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-04 23:04:52 (4 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/216.26.254.24 2026- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/216.26.254.24 2026-04-04 18:59:31 /video/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-17 22:54:35 (5 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/216.26.254.24 2026- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/216.26.254.24 2026-03-17 10:07:32 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%200%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 2026-03-17 10:07:33 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%201%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-01 23:18:14 (5 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/216.26.254.24 2026- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/216.26.254.24 2026-03-01 06:30:31 /shop/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-28 23:31:03 (7 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.254.24 2026-01- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.254.24 2026-01-28 11:26:49 /v1/cs/configs?search=accurate&dataId=&group=&appName=&config_tags=&pageNo=1&pageSize=999&tenant= show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:06 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-11 06:24:27 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 01:24:21.101726 2025] [security2:error] [pid 400:tid 400] [client 216.26.254.24:17749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mispar.consulting"] [uri "/.git/HEAD"] [unique_id "aTpjlXwnKJSFpBvompfy9wAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 185.197.8.231

🇺🇸 147.185.132.183

🇫🇷 2001:41d0:33d:9200::40e

🇦🇷 201.221.108.136

🇦🇷 170.247.56.11

🇺🇸 159.223.200.244

🇷🇺 145.255.13.133

🇨🇳 119.96.131.8

🇨🇿 109.164.55.179

🇨🇿 81.161.70.159

🇮🇳 59.178.53.9

🇧🇷 34.151.227.109

🇪🇹 196.189.127.229

🇷🇺 195.218.157.226

🇺🇸 193.122.152.116

🇧🇷 187.94.255.130

🇳🇱 146.0.78.149

🇨🇳 123.112.220.227

🇹🇼 110.25.112.143

🇺🇸 109.105.210.68