216.26.247.97

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
26% Elevated
41 reports
24 reporters · latest 1 day ago
ISP
3xK Tech GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS200373
Domain Name
3xktech.cloud
Country
🇩🇪 Germany
City
Berlin, State of Berlin
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
41 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇨🇿 Czechia 1 🇮🇩 Indonesia 1
Most common categories Web App Attack 4 Brute-Force 3 Bad Web Bot 2 Hacking 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 pcouy
Obvious bot patterns with spoofed User-agent : Mozilla/5.0 (Linux; Android 15; Pixel 9 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Mobile Safari/537.36 ...
Bad Web Bot
🇫🇷 pcouy
Obvious bot patterns with spoofed User-agent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 ...
Bad Web Bot
🇲🇹 Malta
216.26.247.97 - - [14/Oct/2026:13:42:13 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Brute-force password attempt
Hacking Web App Attack Brute-Force
🇫🇷 ELYAZ
(wordpress) Failed wordpress login from 216.26.247.97 (ES/Spain/-): (CF_ENABLE)
Brute-Force
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 65).
Hacking Web App Attack
🇺🇸 drewf.ink
[00:26] Attempted HTTPS GlobalProtect config retrieval with credentials rflynn:Pa*****d1 (getconfig.esp - some brute-force tooling targets this directly instead of login.esp)
Web App Attack
🇨🇿 lp
Brute-Force Web App Attack
🇺🇸 LSPCCU
DDoS Attack Hacking Brute-Force Web App Attack SSH
🇩🇪 NxtGenIT
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html?fcadbadd=1 HTTP/1.1" 200 -,
Brute-Force
🇺🇸 SX Communications
DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Sklurk
Web App Attack
Web App Attack
🇫🇷 ELYAZ
(wordpress) Failed wordpress login from 216.26.247.97 (ES/Spain/-): (CF_ENABLE)
Brute-Force
Anonymous
Automated Apache web application probing in selected 24h window; attempts=17, unique_paths=2, error_responses=6; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths.
Web App Attack
🇫🇷 ELYAZ
(wordpress) Failed wordpress login from 216.26.247.97 (ES/Spain/-): (CF_ENABLE)
Brute-Force
🇲🇹 Malta
216.26.247.97 - - [28/Jul/2026:00:12:51 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 159.89.239.49
🇭🇰 154.92.2.59
🇫🇮 147.185.133.55
🇺🇸 147.182.135.91
🇺🇸 66.132.159.82
🇰🇷 27.102.102.170
🇮🇩 202.91.14.2
🇺🇸 199.165.159.26
🇹🇼 198.235.24.65
🇬🇧 188.240.59.55
🇳🇱 149.5.4.27
🇫🇮 147.185.133.213
🇮🇳 139.59.42.255
🇺🇸 135.119.19.134
🇫🇮 104.245.242.101
🇫🇷 91.231.89.34
feedback