JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.248.236

216.26.248.236 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 18%: ?

18%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.248.236

Whois 216.26.248.236

IP Abuse Reports for 216.26.248.236:

This IP address has been reported a total of 16 times from 6 distinct sources. 216.26.248.236 was first reported on November 24th 2025, and the most recent report was 49 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 i-turnradio.nl	2026-07-21 21:53:55 (49 minutes ago)	2026-07-21 @ 23:53:54 (CET) ~ Blocked for trying to access: /wp-sitemap.xml	Web App Attack
🇮🇹 Francesco Ippoliti	2026-07-05 01:52:41 (2 weeks ago)	[Jul 5 03:52:40] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:100@154 ... show more [Jul 5 03:52:40] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '216.26.248.236:28521' (callid: 9b08481a839de6dc148105f41802501c) - No matching endpoint found ... show less	Brute-Force Port Scan
🇮🇹 Francesco Ippoliti	2026-07-03 23:07:12 (2 weeks ago)	[Jul 4 01:07:12] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:901@154 ... show more [Jul 4 01:07:12] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '216.26.248.236:49806' (callid: 78e2a745ac7e09c4974da5f997f198e2) - No matching endpoint found [Jul 4 01:07:12] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '216.26.248.236:49806' (callid: 78e2a745ac7e09c4974da5f997f198e2) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇮 sgofferj	2026-07-03 21:55:47 (2 weeks ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇨🇭 backslash	2026-01-06 12:00:09 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-02 06:00:58 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 01:00:51.328683 2025] [security2:error] [pid 13944:tid 13944] [client 216.26.248.236:60409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madronabluff.com"] [uri "/.svn/wc.db"] [unique_id "aS6Ak5O2X4C7mehU1DWpiwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:14:59 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:14:51.343072 2025] [security2:error] [pid 6055:tid 6055] [client 216.26.248.236:26429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bwmurphy.com"] [uri "/.env"] [unique_id "aS51y_Q9KQ8YRBC1S-_kiAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:05:03 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:04:57.965129 2025] [security2:error] [pid 4938:tid 4938] [client 216.26.248.236:21591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "angeladuffin.com"] [uri "/.svn/wc.db"] [unique_id "aS5laX7Vdw-UEDNwPOwIjQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 01:22:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 20:22:49.188943 2025] [security2:error] [pid 16166:tid 16179] [client 216.26.248.236:30405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wijaya.biz"] [uri "/.svn/wc.db"] [unique_id "aS4_aXvtVYJyiW9Nfli3twAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Carsten	2025-11-25 22:08:03 (7 months ago)	GET [.git/HEAD]	Port Scan
🇺🇸 TPI-Abuse	2025-11-25 02:57:28 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:57:19.525163 2025] [security2:error] [pid 28541:tid 28541] [client 216.26.248.236:17741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.samanthasomers.com"] [uri "/.git/HEAD"] [unique_id "aSUbDyJ-20I5mP71eRJuOgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:04:23 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:04:18.227155 2025] [security2:error] [pid 19406:tid 19406] [client 216.26.248.236:34949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.csmedicalbilling.com"] [uri "/.git/HEAD"] [unique_id "aSUAkgnhmskCuJIV2PQbegAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:44:44 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:23:36.546315 2025] [security2:error] [pid 25280:tid 25280] [client 216.26.248.236:39895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.99newmexicans.com"] [uri "/.env"] [unique_id "aST3CEEXbrjUn7Tw6O6QsQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:42:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:42:49.536490 2025] [security2:error] [pid 9060:tid 9060] [client 216.26.248.236:23211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jspd.com"] [uri "/.git/HEAD"] [unique_id "aSP-aZQYoZJzkbx5RSWxkgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:02:13 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:02:07.037674 2025] [security2:error] [pid 5223:tid 5236] [client 216.26.248.236:35291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.geekshop.com"] [uri "/.svn/wc.db"] [unique_id "aSPmz2BLaC45odtmKAmeMwAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a04:4e40:1720:0:e3e:51dd:e9d1:95fb

🇭🇰 199.45.155.98

🇿🇦 197.185.132.206

🇵🇱 176.53.159.198

🇨🇦 85.217.149.41

🇧🇬 79.124.62.242

🇩🇪 64.225.109.181

🇷🇺 178.178.222.58

🇩🇪 139.59.208.49

🇨🇳 117.34.85.168

🇸🇬 82.38.180.154

🇺🇸 74.208.191.249

🇺🇸 47.251.117.187

🇷🇺 45.91.64.7

🇵🇱 34.116.230.189

🇮🇹 31.59.89.180

🇺🇸 198.98.54.35

🇩🇴 186.120.179.222

🇩🇪 165.245.242.47

🇸🇬 34.126.133.185