JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.255.66

216.26.255.66 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.255.66

Whois 216.26.255.66

IP Abuse Reports for 216.26.255.66:

This IP address has been reported a total of 13 times from 5 distinct sources. 216.26.255.66 was first reported on November 9th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-09 00:53:32 (3 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-17 04:44:35 (3 weeks ago)	Web App Attack	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:23 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇱🇻 garmtech.com	2025-11-26 12:47:18 (7 months ago)	Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:56:52 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:56:45.346185 2025] [security2:error] [pid 9895:tid 9895] [client 216.26.255.66:39529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.1writeforthegrant.com"] [uri "/.git/HEAD"] [unique_id "aSZQTSB3cJkYNDEqxl23qwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:11:47 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:11:44.326730 2025] [security2:error] [pid 954054:tid 954054] [client 216.26.255.66:60533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.vfflag.info"] [uri "/.git/HEAD"] [unique_id "aSVWsGa-ZzfVR7GkKp2l_wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:56:08 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:55:50.186839 2025] [security2:error] [pid 15686:tid 15686] [client 216.26.255.66:31929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "discountbusinessholidaycards.com"] [uri "/.svn/wc.db"] [unique_id "aSUoxtuVfXOkc9Wxd3oKswAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:25:36 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:25:29.048411 2025] [security2:error] [pid 29795:tid 29795] [client 216.26.255.66:56115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.marcosbarraza.net"] [uri "/.git/HEAD"] [unique_id "aST3eRfsx77Cm9rnK6nWgQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:44:05 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:44:00.824179 2025] [security2:error] [pid 23546:tid 23546] [client 216.26.255.66:30493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.zmgmt.com"] [uri "/.env"] [unique_id "aSQa0FZnvzGLIjlq70ld1gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:26:44 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:26:39.082648 2025] [security2:error] [pid 23234:tid 23234] [client 216.26.255.66:43703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bbernal.com"] [uri "/.env"] [unique_id "aSPsj8BMxyuffLm1FnL9XAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-11 11:09:36 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 06:09:29.994947 2025] [security2:error] [pid 11402:tid 11402] [client 216.26.255.66:28137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.honkouji.net"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRMZaYGILA79aYnIkBgBagAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-09 11:06:45 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 216.26.255.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 06:06:40.204823 2025] [security2:error] [pid 17302:tid 17302] [client 216.26.255.66:12037] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.richardpetersbooks.easyweb-publishing.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.richardpetersbooks.easyweb-publishing.com"] [uri "/s3cmd.ini"] [unique_id "aRB1wMJbG38htRfAkTrHhQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.239.251.12

🇳🇱 185.223.235.46

🇩🇪 167.233.109.10

🇺🇸 162.216.149.40

🇭🇰 118.193.32.119

🇩🇪 69.5.169.180

🇨🇳 27.17.143.16

🇰🇷 14.63.196.175

🇺🇸 172.238.160.104

🇺🇸 162.216.149.253

🇫🇮 147.185.133.108

🇺🇸 104.28.246.113

🇳🇱 91.92.42.149

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141

🇺🇸 45.3.36.66

🇺🇸 20.15.164.165

🇺🇸 216.25.89.85

🇹🇼 198.235.24.121

🇺🇸 162.216.150.126