JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.248.135

216.26.248.135 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.248.135

Whois 216.26.248.135

IP Abuse Reports for 216.26.248.135:

This IP address has been reported a total of 19 times from 12 distinct sources. 216.26.248.135 was first reported on October 11th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-07-02 05:14:52 (1 day ago)	18 attacks on PHP URLs, Wordpress URLs: GET /xmlrpc.php?rsd HTTP/1.1 GET /sito/wp-includes/wlwmanife ... show more 18 attacks on PHP URLs, Wordpress URLs: GET /xmlrpc.php?rsd HTTP/1.1 GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1 show less	Web App Attack
🇧🇪 cmbplf	2026-06-12 12:41:02 (2 weeks ago)	569 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇱🇻 garmtech.com	2026-03-10 21:06:17 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-06.216.26.248.135.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-06.216.26.248.135.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 oncord	2026-03-07 11:09:53 (3 months ago)	Form spam	Web Spam
🇺🇸 oncord	2026-02-19 06:55:42 (4 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-10 00:51:37 (4 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-06 10:49:12 (4 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-03 23:37:47 (4 months ago)	Form spam	Web Spam
🇺🇸 jcbriar	2026-01-13 12:30:12 (5 months ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇺🇸 myagent.site	2026-01-13 11:55:10 (5 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:00 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-28 03:03:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 22:03:45.242162 2025] [security2:error] [pid 4023:tid 4039] [client 216.26.248.135:16413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gfx-technology.com"] [uri "/.env"] [unique_id "aVCeEY9HklImrHUOKAUoCAAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 21:03:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 16:03:38.069030 2025] [security2:error] [pid 16723:tid 16723] [client 216.26.248.135:46091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trafficstopper.com"] [uri "/.git/HEAD"] [unique_id "aVBJqvUx6MsQrchYIR_pEAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-12-10 15:36:43 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-12-08 02:13:35 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:599:c29:1349:c9db:617d:328b:e5b

🇩🇪 139.19.117.197

🇩🇪 94.16.17.139

🇮🇳 80.225.238.77

🇨🇳 39.154.17.133

🇷🇺 5.255.231.201

🇨🇳 203.25.208.110

🇫🇮 147.185.133.15

🇨🇳 123.145.15.61

🇷🇴 92.118.39.148

🇷🇴 92.118.39.77

🇷🇺 87.250.224.31

🇭🇰 52.184.100.96

🇳🇱 45.148.10.152

🇺🇸 3.82.158.18

🇨🇦 216.26.250.133

🇷🇺 213.180.203.10

🇺🇸 204.220.180.205

🇬🇧 154.16.44.218

🇨🇳 111.61.97.108