JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

216.26.248.190

Activity Trending Down

Abuse Confidence Score

19% Caution

24 reports

12 reporters · latest 1 month ago

ISP: 3xK Tech GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS200373
Domain Name: 3xktech.cloud
Country: 🇩🇪 Germany
City: Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

24 from 12 distinct reporters

First reported

November 2nd 2025

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇫🇷 France 2 🇦🇺 Australia 1 🇮🇩 Indonesia 1

Most common categories Web App Attack 6 Bad Web Bot 1 Hacking 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 securejdprop	2026-10-09 13:16:52 UTC · (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 65).	Hacking Web App Attack
🇺🇸 drewf.ink	2026-09-29 13:53:30 UTC · (1 month ago)	[13:53] Attempted HTTPS access to the GlobalProtect prelogin endpoint (VPN gateway fingerprinting/recon)	Web App Attack
🇫🇷 COMAITE	2026-09-28 10:33:27 UTC · (1 month ago)	SQL injection attempt from 216.26.248.190.	Web App Attack
🇦🇺 Terrier	2026-09-27 20:00:50 UTC · (1 month ago)	Blocked for HTTP vulnerability scanning (excessive 40x)	Web App Attack
🇫🇷 fineservice	2026-09-25 05:31:25 UTC · (1 month ago)	PrestaShop Security Module: SQL injection probe detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-09-24 17:20:29 UTC · (1 month ago)	[24/Sep/2026:20:20:29 +0300] -- 216.26.248.190 Ban reason: Scanner [CMS_GENERIC] \| Request: GET ///phpMyAdmin.old/// HTTP/1.1	Bad Web Bot Web App Attack
🇸🇪 OnTheEdge	2026-09-03 16:58:45 UTC · (2 months ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇷🇺 DZBOT	2026-08-11 16:17:05 UTC · (3 months ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 Sklurk	2026-08-02 02:52:03 UTC · (3 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-01 02:32:18 UTC · (3 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-31 00:46:55 UTC · (3 months ago)	Web App Attack	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:09 UTC · (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-07 14:42:45 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.190 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:42:40.839613 2025] [security2:error] [pid 8670:tid 8670] [client 216.26.248.190:18855] M ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.190 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:42:40.839613 2025] [security2:error] [pid 8670:tid 8670] [client 216.26.248.190:18855] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pucketosgardenclub.org"] [uri "/.svn/wc.db"] [unique_id "aTWSYI4q-cv-nlB7mWsVjwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 13:03:15 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.190 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:03:08.268422 2025] [security2:error] [pid 27958:tid 27958] [client 216.26.248.190:55123] ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.190 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:03:08.268422 2025] [security2:error] [pid 27958:tid 27958] [client 216.26.248.190:55123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elderlyassociation.org"] [uri "/.env"] [unique_id "aTV7DEOWsOXMXI3VIGlsCAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 12:26:35 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.190 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:26:28.647221 2025] [security2:error] [pid 17768:tid 17768] [client 216.26.248.190:27813] ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.190 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:26:28.647221 2025] [security2:error] [pid 17768:tid 17768] [client 216.26.248.190:27813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bletnslb.org"] [uri "/.env"] [unique_id "aTVydIfbFOxuOt9D3HmyxgAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 193.163.125.244

🇬🇧 185.216.145.177

🇨🇳 113.95.145.80

🇳🇱 104.248.194.148

🇺🇸 64.225.35.233

🇳🇱 34.7.77.17

🇳🇱 195.178.110.26

🇷🇴 80.94.92.179

🇬🇧 31.14.254.40

🇻🇳 14.191.161.28

🇻🇳 14.188.70.116

🇺🇸 3.82.148.1

🇵🇰 101.53.225.188

🇨🇦 85.217.149.33

🇺🇸 34.229.245.87

🇬🇧 213.166.84.60

🇧🇷 192.141.60.93

🇺🇸 172.104.30.66

🇺🇸 162.216.149.27

🇫🇷 85.217.140.8