JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.254.82

216.26.254.82 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.254.82

Whois 216.26.254.82

IP Abuse Reports for 216.26.254.82:

This IP address has been reported a total of 21 times from 6 distinct sources. 216.26.254.82 was first reported on October 16th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-05-22 20:28:03 (2 weeks ago)	Wordfence waf block on wp20190711M4	Web App Attack
🇧🇪 voormedia	2026-02-16 10:05:27 (3 months ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
Anonymous	2025-12-26 20:12:30 (5 months ago)	"GET /.git/HEAD HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 16:48:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 11:48:03.171509 2025] [security2:error] [pid 30168:tid 30168] [client 216.26.254.82:59547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bodybuildbid.com"] [uri "/.git/HEAD"] [unique_id "aScvQ5r1sNDpInAYUQP97wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:17:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:17:24.342929 2025] [security2:error] [pid 7335:tid 7335] [client 216.26.254.82:44053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cinemasky.net"] [uri "/.env"] [unique_id "aSbTtL5p517qQ8eOmLkJXgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:22:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:22:41.951940 2025] [security2:error] [pid 14131:tid 14131] [client 216.26.254.82:52263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.embeddedtrade.com"] [uri "/.svn/wc.db"] [unique_id "aSVLMS1GyfdkWvo84hJ6OwAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:05:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:05:45.218337 2025] [security2:error] [pid 1817001:tid 1817052] [client 216.26.254.82:38061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pueblodermatology.com"] [uri "/.env"] [unique_id "aSVHOWR1ttxeyDpsCa-CkQAAAY0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:42:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:42:24.710535 2025] [security2:error] [pid 30065:tid 30065] [client 216.26.254.82:51099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ironheadsofseo.com"] [uri "/.svn/wc.db"] [unique_id "aSVBwJkXVjpMRe6Iju5QkQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:21:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:21:16.555924 2025] [security2:error] [pid 6131:tid 6131] [client 216.26.254.82:23903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.buffaloweddingdeejay.com"] [uri "/.env"] [unique_id "aSU8zCfHRTm1L0j_Zjx7OwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:42:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:42:26.084700 2025] [security2:error] [pid 15883:tid 15883] [client 216.26.254.82:20109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.denisfrison.com"] [uri "/.svn/wc.db"] [unique_id "aSUzsrnPZv2mxOEodkQ2LgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:22:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:22:00.988769 2025] [security2:error] [pid 24674:tid 24674] [client 216.26.254.82:50641] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.stormstrips.com"] [uri "/.svn/wc.db"] [unique_id "aSUu6MKi3CvFVOQqryfQLgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:59:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:59:34.682527 2025] [security2:error] [pid 13723:tid 13723] [client 216.26.254.82:51643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.stradcompetition.org"] [uri "/.svn/wc.db"] [unique_id "aSUpppHH0DbZgE40JLCOXQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:40:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:40:15.926655 2025] [security2:error] [pid 577:tid 577] [client 216.26.254.82:49133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jasonmcquain.com"] [uri "/.svn/wc.db"] [unique_id "aSUlHyx0zr30Uim75qf3yAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:25:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:25:14.109042 2025] [security2:error] [pid 26774:tid 26774] [client 216.26.254.82:15245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.brmccarpentry.com"] [uri "/.env"] [unique_id "aSUTilG96Ok8FBf46KFpMwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:49:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.254.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:49:27.079056 2025] [security2:error] [pid 5460:tid 5460] [client 216.26.254.82:29207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ez1productions.thinksite.net"] [uri "/.env"] [unique_id "aSULJwpRqas3A5ffu_idzQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.90.26.58

🇺🇸 165.154.36.250

🇨🇳 163.142.78.17

🇺🇸 162.216.149.187

🇨🇳 120.48.76.190

🇮🇳 103.21.79.242

🇨🇦 85.217.149.59

🇫🇷 85.217.140.51

🇧🇪 34.38.102.2

🇧🇬 212.91.161.162

🇺🇸 205.210.31.80

🇷🇺 178.249.242.178

🇧🇷 177.36.7.215

🇸🇬 159.223.36.55

🇺🇸 152.32.150.117

🇰🇷 118.37.214.187

🇷🇴 92.118.39.236

🇺🇸 64.31.18.114

🇳🇱 192.42.116.19

🇧🇷 181.218.9.86