JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.244.197

216.26.244.197 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 12%: ?

12%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.244.197

Whois 216.26.244.197

IP Abuse Reports for 216.26.244.197:

This IP address has been reported a total of 13 times from 11 distinct sources. 216.26.244.197 was first reported on October 1st 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-27 17:43:13 (1 week ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇳🇱 soverin	2026-05-21 21:29:42 (2 weeks ago)	Network scan on port 80	Email Spam
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-02-12 00:34:45 (3 months ago)	216.26.244.197 - - [12/Feb/2026:00:34:44 +0000] "GET /.env.staging HTTP/1.1" 302 3409 "-" "Mozilla/5 ... show more 216.26.244.197 - - [12/Feb/2026:00:34:44 +0000] "GET /.env.staging HTTP/1.1" 302 3409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
🇦🇺 afleventoffice.com.au	2026-02-11 03:57:35 (3 months ago)	GET /new/.git/config HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 21:11:25 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.244.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.244.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 16:11:17.441866 2025] [security2:error] [pid 7217:tid 7217] [client 216.26.244.197:52905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "celebritybikinigossip.com"] [uri "/.svn/wc.db"] [unique_id "aVBLdZTEQ41HL9qny6kKBQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 18:50:53 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.244.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.244.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 13:50:48.473937 2025] [security2:error] [pid 30613:tid 30613] [client 216.26.244.197:25419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jfordclanrecipes.com"] [uri "/.git/HEAD"] [unique_id "aVAqiHs8DOyZm8cxQAW3PQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 16:48:14 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.244.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.244.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 11:48:08.058069 2025] [security2:error] [pid 18419:tid 18419] [client 216.26.244.197:57415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oowoah.com"] [uri "/.svn/wc.db"] [unique_id "aVANyKOn6lAjFzDOqW9sXQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-27 14:33:23 (5 months ago)	"GET /.aws/credentials HTTP/1.1"	Hacking Web App Attack
🇫🇷 Security_Whaller	2025-12-26 00:17:01 (5 months ago)	Malicious activity detected on Honeypot.	Hacking Brute-Force Web App Attack
🇺🇸 nowyouknow	2025-11-24 07:28:44 (6 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, countl ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> https://themoneyfromhome.com show less	Phishing Web Spam
🇦🇺 oncord	2025-10-08 16:05:25 (7 months ago)	Form spam	Web Spam
🇱🇻 garmtech.com	2025-10-01 06:08:25 (8 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-08.216.26.244.197.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-08.216.26.244.197.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 150.107.38.112

🇱🇹 81.30.98.49

🇮🇹 79.3.96.178

🇳🇱 45.148.10.230

🇨🇳 180.76.235.157

🇳🇱 176.65.139.103

🇸🇪 171.25.158.80

🇸🇬 168.144.133.204

🇺🇸 72.241.202.216

🇺🇸 66.132.224.20

🇺🇸 66.132.172.217

🇬🇧 35.203.210.180

🇩🇪 213.209.159.238

🇬🇧 194.80.204.22

🇨🇳 117.132.5.139

🇺🇸 23.238.123.176

🇺🇸 216.25.89.81

🇧🇪 198.235.24.237

🇮🇳 182.95.102.178

🇩🇪 104.28.155.178