JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.255.14

216.26.255.14 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 29%: ?

29%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.255.14

Whois 216.26.255.14

IP Abuse Reports for 216.26.255.14:

This IP address has been reported a total of 39 times from 19 distinct sources. 216.26.255.14 was first reported on October 10th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-08-23 06:42:04 (1 day ago)	Wordfence waf block on restore georgia	Web App Attack
🇲🇽 octageeks.com	2026-08-23 04:06:10 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 Sklurk	2026-08-14 06:57:02 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-05 00:35:02 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-04 00:18:24 (2 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-07-29 07:00:00 (3 weeks ago)	Apache probe; attempts=20; exact paths: /xmlrpc.php	Web App Attack
🇩🇪 raspi4	2026-07-07 12:21:08 (1 month ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-02-08 23:13:14 (6 months ago)	ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/216.26.255.14 2026- ... show more ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/216.26.255.14 2026-02-08 21:27:19 /?redirect:${%23req%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23s%3dnew%20java.util.Scanner((new%20java.lang.ProcessBuilder(%27netstat%20-an%27.toString().split(%27\\s%27))).start().getInputStream()).useDelimiter(%27\\AAAA%27),%23str%3d%23s.hasNext()?%23s.next():%27%27,%23resp%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23resp.setCharacterEncoding(%27UTF-8%27),%23resp.getWriter().println(%23str),%23resp.getWriter().flush(),%23resp.getWriter().close()} show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-27 01:03:58 (6 months ago)	ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/216.26.255.14 2026- ... show more ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/216.26.255.14 2026-01-26 21:26:42 /v1/core/cluster/nodes?withInstances=false&pageNo=1&pageS%20ize=10&keyword show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-10 01:10:16 (7 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/216.26.255.14 2026-01-09 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/216.26.255.14 2026-01-09 05:10:24 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
Anonymous	2025-12-30 01:38:51 (7 months ago)	2025-12-30T03:38:50.209220+02:00 zanati wp(www.sahpa.co.za)[593708]: Blocked authentication attempt ... show more 2025-12-30T03:38:50.209220+02:00 zanati wp(www.sahpa.co.za)[593708]: Blocked authentication attempt for [email protected] from 216.26.255.14 ... show less	Web App Attack
🇮🇩 Burayot	2025-12-25 00:05:21 (7 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.26.255.14 (FR/France/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.26.255.14 (FR/France/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-09 05:55:28 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 216.26.255.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 216.26.255.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 00:55:19.993984 2025] [security2:error] [pid 7162:tid 7162] [client 216.26.255.14:30627] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|magacine.tv\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "magacine.tv"] [uri "/wp-json/wp/v2/users"] [unique_id "aTe5x5wC1jgx4nCVxPPPZwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-09 04:58:46 (8 months ago)	botnet	DDoS Attack
🇨🇭 backslash	2025-12-03 11:20:07 (8 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400c:c03::12b

🇨🇳 222.176.200.218

🇨🇳 222.89.138.40

🇨🇳 218.13.26.42

🇦🇷 216.244.231.160

🇬🇧 198.105.100.50

🇳🇱 193.176.31.251

🇳🇱 192.178.116.24

🇺🇸 192.30.80.178

🇮🇳 182.18.161.165

🇺🇸 167.160.50.116

🇺🇸 158.222.117.99

🇧🇪 104.155.29.5

🇺🇸 91.230.168.137

🇺🇸 91.230.168.15

🇹🇷 78.187.9.53

🇺🇸 46.28.195.105

🇺🇸 20.168.127.116

🇺🇸 207.199.190.12

🇦🇷 200.81.188.147