JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.248.110

216.26.248.110 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.248.110

Whois 216.26.248.110

IP Abuse Reports for 216.26.248.110:

This IP address has been reported a total of 19 times from 11 distinct sources. 216.26.248.110 was first reported on October 27th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-06-13 04:09:58 (2 hours ago)	(mod_security) mod_security (id:900001) triggered by 216.26.248.110: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 216.26.248.110: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 07:09:57.018838 2026] [security2:error] [pid 568634:tid 568718] [client 216.26.248.110:51721] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.asteriassantorini.com"] [severity "CRITICAL"] [tag "security"] [hostname "mail.asteriassantorini.com"] [uri "/wp-login.php"] [unique_id "aizYFWhA1AVliy02kiGXMwAAAcw"], referer: https://mail.asteriassantorini.com/wp-login.php show less	Port Scan
🇩🇪 FeG Deutschland	2026-06-12 12:28:10 (18 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇬🇷 setupgr	2026-06-12 07:03:36 (23 hours ago)	(mod_security) mod_security (id:900001) triggered by 216.26.248.110: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 216.26.248.110: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 10:03:34.766129 2026] [security2:error] [pid 104094:tid 104289] [client 216.26.248.110:44067] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: gyrosplace.gr"] [severity "CRITICAL"] [tag "security"] [hostname "gyrosplace.gr"] [uri "/wp-login.php"] [unique_id "aiuvRlnoc2nF41quz4OtiwAAARA"], referer: https://gyrosplace.gr/wp-login.php show less	Port Scan
🇮🇩 zam	2026-06-11 20:06:40 (1 day ago)	216.26.248.110 - - [11/Jun/2026:20:06:21 +0000] "POST /wp-login.php HTTP/1.1" 301 277	Web App Attack
🇺🇸 lostswordfish.com	2026-06-10 08:54:05 (2 days ago)	Wordfence waf block on jestrellafoundation	Web App Attack
🇫🇷 ELYAZ	2026-06-10 02:13:10 (3 days ago)	(y4) Failed scan -byebye- from 216.26.248.110 (TH/Thailand/-): (CF_ENABLE)	Hacking
🇬🇧 PeravixGroup	2026-05-22 11:30:49 (3 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-16 05:04:18 (4 weeks ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇨🇳 ThreatBook.io	2026-01-13 01:50:05 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.248.110 2026-01 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.248.110 2026-01-12 23:45:38 /down/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2026-01-12 05:04:59 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-31 00:55:10 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.248.110 2025-12 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.248.110 2025-12-30 06:30:07 /.env show less	Web App Attack
🇨🇦 SSH-Admin	2025-12-27 22:05:38 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇨🇳 ThreatBook.io	2025-12-07 23:31:46 (6 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.248.110 2025-12 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.248.110 2025-12-07 06:18:54 /?redirect:${%23req%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23s%3dnew%20java.util.Scanner((new%20java.lang.ProcessBuilder(%27netstat%20-an%27.toString().split(%27\\s%27))).start().getInputStream()).useDelimiter(%27\\AAAA%27),%23str%3d%23s.hasNext()?%23s.next():%27%27,%23resp%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23resp.setCharacterEncoding(%27UTF-8%27),%23resp.getWriter().println(%23str),%23resp.getWriter().flush(),%23resp.getWriter().close()} 2025-12-07 06:18:53 / show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 02:30:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.110 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 21:30:22.151329 2025] [security2:error] [pid 21810:tid 21810] [client 216.26.248.110:14491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acadianahero.com"] [uri "/.env"] [unique_id "aSpavr6WIiUq_94UhyaHhAAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 00:42:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.110 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 19:42:11.218634 2025] [security2:error] [pid 31247:tid 31247] [client 216.26.248.110:24155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aboutahome.net"] [uri "/.env.backup"] [unique_id "aSpBY5n3w2UDJT56T4yDbAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.8

🇷🇺 188.191.164.55

🇺🇸 147.185.132.125

🇺🇸 205.210.31.88

🇬🇧 195.96.139.137

🇸🇬 172.217.32.147

🇺🇸 162.216.150.111

🇺🇸 147.185.132.26

🇧🇷 138.117.119.189

🇺🇸 136.144.35.242

🇺🇸 136.144.35.235

🇬🇧 101.36.97.131

🇨🇦 85.217.149.48

🇩🇪 69.5.169.162

🇷🇺 62.33.71.27

🇺🇸 47.89.211.155

🇸🇳 41.208.155.63

🇮🇳 223.178.208.133

🇨🇳 183.252.22.17

🇩🇪 157.90.31.2