JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.255.250

216.26.255.250 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 41%: ?

41%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.255.250

Whois 216.26.255.250

IP Abuse Reports for 216.26.255.250:

This IP address has been reported a total of 20 times from 13 distinct sources. 216.26.255.250 was first reported on October 14th 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 billyborsht	2026-07-07 20:09:36 (14 hours ago)	2026-07-08T08:09:35.702237+12:00 southern wordpress(leanpolicy.org)[2341358]: Authentication attempt ... show more 2026-07-08T08:09:35.702237+12:00 southern wordpress(leanpolicy.org)[2341358]: Authentication attempt for unknown user letmeseehaha_2026 from 216.26.255.250 ... show less	Hacking Web App Attack
🇲🇽 octageeks.com	2026-07-07 04:13:24 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 FeG Deutschland	2026-07-06 12:01:28 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇫🇷 ELYAZ	2026-07-01 02:37:39 (1 week ago)	(y4) Failed scan -byebye- from 216.26.255.250 (FR/France/-): (CF_ENABLE)	Hacking
🇺🇸 lostswordfish.com	2026-06-29 06:54:03 (1 week ago)	Wordfence waf block on ncrsol	Web App Attack
🇺🇸 dtorrer	2026-06-27 19:57:23 (1 week ago)	Brute-force general attack.	Brute-Force
🇩🇪 Lino Project	2026-05-09 03:22:21 (1 month ago)	216.26.255.250 - - [09/May/2026:05:22:20 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "http ... show more 216.26.255.250 - - [09/May/2026:05:22:20 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-05-07 23:29:59 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /index.php UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-04-16 19:16:42 (2 months ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Macintosh; Int ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-04-08 10:24:49 (3 months ago)	216.26.255.250 - - [08/Apr/2026:12:24:49 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3963 "https://www.pri ... show more 216.26.255.250 - - [08/Apr/2026:12:24:49 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3963 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-03-30 07:33:25 (3 months ago)	216.26.255.250 - - [30/Mar/2026:09:33:18 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6555 "http ... show more 216.26.255.250 - - [30/Mar/2026:09:33:18 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6555 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 216.26.255.250 - - [30/Mar/2026:09:33:24 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6555 "https://www.primobio.it/mio-account/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:32:50 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.255.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.255.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:32:42.801297 2025] [security2:error] [pid 29227:tid 29227] [client 216.26.255.250:24403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.donutburger.com"] [uri "/.env"] [unique_id "aSa7KgVJbgAdafKxGeYaewAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:04:09 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.255.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.255.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:04:03.576340 2025] [security2:error] [pid 7058:tid 7058] [client 216.26.255.250:14485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.damgoodit.com"] [uri "/.svn/wc.db"] [unique_id "aSaYU8r-H56rL5S6xZ8_mwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:13:01 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.255.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.255.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:12:54.338287 2025] [security2:error] [pid 30414:tid 30414] [client 216.26.255.250:55841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.specialtycomputer.com"] [uri "/.svn/wc.db"] [unique_id "aSZiJunoKyDgkm-_7LsTlQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:53:13 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.255.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.255.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:53:09.055951 2025] [security2:error] [pid 1647077:tid 1647129] [client 216.26.255.250:27305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lavonnesells.com"] [uri "/.svn/wc.db"] [unique_id "aSUaFdNHCagQpGvj6qPDjQAAAlY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.158.225.143

🇺🇦 195.128.27.229

🇫🇷 144.91.95.184

🇲🇾 203.121.106.56

🇧🇷 201.148.164.47

🇸🇪 171.25.158.24

🇨🇳 120.203.25.201

🇧🇩 103.139.144.222

🇫🇷 91.231.89.129

🇳🇱 91.92.40.8

🇺🇸 2607:f8b0:4004:c25::12e

🇿🇦 165.16.186.81

🇵🇰 103.115.197.28

🇩🇪 82.165.90.100

🇺🇸 47.251.164.155

🇨🇳 220.181.108.144

🇺🇿 213.230.111.14

🇮🇳 157.49.198.57

🇻🇳 103.82.20.130

🇸🇬 47.84.140.114