JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.231.248

216.26.231.248 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.231.248

Whois 216.26.231.248

IP Abuse Reports for 216.26.231.248:

This IP address has been reported a total of 30 times from 9 distinct sources. 216.26.231.248 was first reported on September 28th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 seoxan.es	2026-03-31 11:50:40 (2 months ago)	Form Spam	Web Spam
🇮🇹 Progetto1	2026-01-10 19:10:02 (4 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2025-12-12 20:41:37 (5 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-27 21:40:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 16:40:20.104475 2025] [security2:error] [pid 26057:tid 26057] [client 216.26.231.248:32731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flybits.co.uk"] [uri "/.env"] [unique_id "aSjFRA9Ahf99z3h9pvX_CwAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:45:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:44:56.248176 2025] [security2:error] [pid 243932:tid 243974] [client 216.26.231.248:11279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.possibilitywhisperer.com"] [uri "/.env"] [unique_id "aSQpGFc8EtVRkmyAMesF-QAAAQk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:26:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:26:45.205470 2025] [security2:error] [pid 17309:tid 17309] [client 216.26.231.248:30627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.weedifyit.com"] [uri "/.env"] [unique_id "aSQItcjOV5ZbInvPaDe-CwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:58:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:58:27.480939 2025] [security2:error] [pid 395:tid 395] [client 216.26.231.248:35169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.stansmarshservices.com"] [uri "/.svn/wc.db"] [unique_id "aSP0AzqmV2-s_Rpi3NkuLAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:37:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:36:58.894339 2025] [security2:error] [pid 29440:tid 29440] [client 216.26.231.248:40133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.genesis-group.net"] [uri "/.svn/wc.db"] [unique_id "aSPu-r1G7vbUvoB4WXurpwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:38:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:37:52.533665 2025] [security2:error] [pid 30149:tid 30149] [client 216.26.231.248:23617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.andrewweigel.name"] [uri "/.env"] [unique_id "aSPhIAaGxpIt-vzOsX41dAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-16 04:54:40 (6 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.11.16 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.11.16 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 techboy117	2025-11-14 00:11:07 (6 months ago)	Blocking due to password spraying.	Brute-Force
Anonymous	2025-11-11 19:01:21 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.11 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.11 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 fbarela	2025-11-08 01:01:08 (6 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-11-01 11:09:38 (7 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.11.01 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.11.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-26 16:41:33 (7 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.26 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.26 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.34.66.245

🇬🇧 86.105.242.212

🇻🇳 14.231.216.159

🇰🇷 14.37.206.136

🇬🇧 198.178.235.38

🇺🇸 170.106.167.142

🇸🇬 143.198.221.127

🇺🇸 104.28.233.73

🇮🇩 103.155.221.91

🇷🇺 91.215.85.193

🇸🇳 41.208.147.131

🇺🇸 40.90.234.147

🇨🇳 220.180.185.18

🇳🇱 185.113.10.178

🇨🇿 185.91.116.105

🇺🇸 184.168.31.238

🇹🇼 180.176.180.160

🇸🇮 176.65.134.16

🇺🇸 173.255.223.115

🇨🇳 163.53.168.23