JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

216.26.243.198

Recent Activity

Abuse confidence score ?

41% Elevated

35 reports

27 reporters · latest 7 hours ago

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 216.26.243.198

Export CSV

This IP address has been reported a total of 35 times from 27 distinct sources. 216.26.243.198 was first reported on October 12th 2025, and the most recent report was 7 hours ago. In the last 60 days, the top reporter locations were: Germany with 6 reports; France with 3 reports; Mexico with 2 reports. Over the same time period, 216.26.243.198 has changed country of origin 2 times. The most common categories in these recent reports were: Web App Attack 10 times; Brute-Force 9 times; Hacking 5 times; Fraud VoIP 3 times; Bad Web Bot 1 time; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 zam	2026-10-04 20:04:20 (7 hours ago)	216.26.243.198 - - [04/Oct/2026:20:04:17 +0000] "POST /wp-login.php HTTP/1.1" 301 277	Web App Attack
🇵🇱 sefinek.net	2026-09-27 06:25:33 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 paneologist	2026-09-15 08:14:32 (2 weeks ago)	2026-09-08T15:36:09+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in f ... show more 2026-09-08T15:36:09+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(216.26.243.198:47787\) 2026-09-08T17:39:16+02:00 theta asterisk\[17133\]: NOTICE\[24074\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'216.26.243.198:22504\' \(callid: d18a3055e86af3ecf6e6cb13925c5337\) - Not match Endpoint ACL 2026-09-08T17:39:16+02:00 theta asterisk\[17133\]: NOTICE\[17469\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'216.26.243.198:22504\' \(callid: d18a3055e86af3ecf6e6cb13925c5337\) - Not match Endpoint ACL 2026-09-08T17:39:16+02:00 theta asterisk\[17133\]: NOTICE\[17469\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'216.26.243.198:22504\' \(callid: d18a3055e86af3ecf6e6cb13925c5337\ show less	Fraud VoIP Brute-Force
🇩🇪 paneologist	2026-09-13 19:38:52 (3 weeks ago)	2026-09-08T15:36:09+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in f ... show more 2026-09-08T15:36:09+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(216.26.243.198:47787\) 2026-09-08T17:39:16+02:00 theta asterisk\[17133\]: NOTICE\[24074\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'216.26.243.198:22504\' \(callid: d18a3055e86af3ecf6e6cb13925c5337\) - Not match Endpoint ACL 2026-09-08T17:39:16+02:00 theta asterisk\[17133\]: NOTICE\[17469\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'216.26.243.198:22504\' \(callid: d18a3055e86af3ecf6e6cb13925c5337\) - Not match Endpoint ACL 2026-09-08T17:39:16+02:00 theta asterisk\[17133\]: NOTICE\[17469\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'216.26.243.198:22504\' \(callid: d18a3055e86af3ecf6e6cb13925c5337\ show less	Fraud VoIP Brute-Force
🇫🇷 Sklurk	2026-09-12 00:03:03 (3 weeks ago)	Web App Attack	Web App Attack
🇩🇪 paneologist	2026-09-08 23:06:56 (3 weeks ago)	2026-09-08T15:36:09+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in f ... show more 2026-09-08T15:36:09+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(216.26.243.198:47787\) 2026-09-08T17:39:16+02:00 theta asterisk\[17133\]: NOTICE\[24074\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'216.26.243.198:22504\' \(callid: d18a3055e86af3ecf6e6cb13925c5337\) - Not match Endpoint ACL 2026-09-08T17:39:16+02:00 theta asterisk\[17133\]: NOTICE\[17469\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'216.26.243.198:22504\' \(callid: d18a3055e86af3ecf6e6cb13925c5337\) - Not match Endpoint ACL 2026-09-08T17:39:16+02:00 theta asterisk\[17133\]: NOTICE\[17469\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'216.26.243.198:22504\' \(callid: d18a3055e86af3ecf6e6cb13925c5337\ show less	Fraud VoIP Brute-Force
🇨🇿 Countryman	2026-09-04 00:10:01 (1 month ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇭 SOC [GOLINE SA]	2026-09-02 18:48:45 (1 month ago)	[RoutePulse \| 2026-09-02T18:48:45Z \| RTBH-INJECTED] ATTACK CLASS: vpn_bruteforce SOURCE: 216.26.243. ... show more [RoutePulse \| 2026-09-02T18:48:45Z \| RTBH-INJECTED] ATTACK CLASS: vpn_bruteforce SOURCE: 216.26.243.198 · AS200373 Drei-K-Tech-GmbH 3xK Tech GmbH EVIDENCE: Cisco VPN RA Brute force on Cisco FTDv — distributed attack (6 attempts/15min) DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring ACTION: BGP null route injected at RoutePulse network edge show less	Brute-Force Hacking
🇺🇸 LSPCCU	2026-08-31 00:02:30 (1 month ago)	TSEC Honeypot Network report. Threat score: 73/100. Categories: Hacking, Brute-Force, Web App Attack ... show more TSEC Honeypot Network report. Threat score: 73/100. Categories: Hacking, Brute-Force, Web App Attack, SSH. Honeypot: h0neytr4p, heralding. Context: 216.26.243.198 classified as botnet node participating in coordinated attack campaigns (high confidence). show less	Hacking Brute-Force Web App Attack SSH
🇫🇷 ELYAZ	2026-08-16 16:26:25 (1 month ago)	(wordpress) Failed wordpress login from 216.26.243.198 (GB/United Kingdom/-): (CF_ENABLE)	Brute-Force
🇲🇽 octageeks.com	2026-08-15 04:18:33 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇳🇿 billyborsht	2026-08-14 22:55:42 (1 month ago)	2026-08-15T10:55:41.490743+12:00 southern wordpress(nzangels.com)[431097]: Authentication attempt fo ... show more 2026-08-15T10:55:41.490743+12:00 southern wordpress(nzangels.com)[431097]: Authentication attempt for unknown user admin from 216.26.243.198 ... show less	Hacking Web App Attack
🇲🇹 Malta	2026-08-14 04:26:48 (1 month ago)	216.26.243.198 - - [14/Aug/2026:06:26:48 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 216.26.243.198 - - [14/Aug/2026:06:26:48 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-08-12 14:27:28 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇩🇪 iNetWorker	2026-08-12 10:03:01 (1 month ago)	trolling for resource vulnerabilities	Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 194.67.109.34

🇫🇮 147.185.133.201

🇰🇷 118.37.214.187

🇮🇳 117.200.103.175

🇨🇳 111.181.68.181

🇫🇷 85.217.140.50

🇺🇸 75.89.41.186

🇺🇸 52.165.91.155

🇺🇸 45.79.207.71

🇺🇸 34.239.130.59

🇧🇪 34.156.56.233

🇩🇪 8.211.47.212

🇺🇸 198.98.54.3

🇨🇳 180.76.143.153

🇵🇰 160.250.114.131

🇬🇧 123.58.207.127

🇺🇸 104.248.50.219

🇺🇸 103.4.251.236

🇺🇸 65.49.1.10

🇺🇸 51.8.106.11