JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.248.244

216.26.248.244 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 32%: ?

32%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.248.244

Whois 216.26.248.244

IP Abuse Reports for 216.26.248.244:

This IP address has been reported a total of 20 times from 13 distinct sources. 216.26.248.244 was first reported on November 24th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 lp	2026-09-19 19:49:53 (1 day ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 216.26.248.244 2026-09-19T20:20:55+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 216.26.248.244 2026-09-19T20:20:55+02:00 vpn Access-Reject 'extra' station: 216.26.248.244 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2026-09-03 21:58:00 (2 weeks ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇩🇪 NxtGenIT	2026-09-03 03:35:32 (2 weeks ago)	CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html?fcadbadd=1 HTTP/1.1" 200 -,	Brute-Force
🇫🇷 Sklurk	2026-09-01 04:08:39 (2 weeks ago)	Web App Attack	Web App Attack
🇺🇸 drewf.ink	2026-08-30 02:00:14 (3 weeks ago)	[02:00] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [02:00] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇺🇸 drewf.ink	2026-08-29 21:49:01 (3 weeks ago)	[21:49] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [21:49] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇵🇱 ketovoila.pl	2026-08-28 15:25:49 (3 weeks ago)	ketovoila.pl WordPress login/xmlrpc probing: hits=2; unique_paths=1; sample_paths=/wp-login.php; UA= ... show more ketovoila.pl WordPress login/xmlrpc probing: hits=2; unique_paths=1; sample_paths=/wp-login.php; UA="Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"; window=2026-08-28T15:25:49Z..2026-08-28T15:25:49Z show less	Web App Attack
🇩🇪 raph	2026-06-25 23:37:28 (2 months ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-22 21:45:06 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇳🇱 DonAtari	2026-05-24 02:19:24 (3 months ago)	DShield firewall scan - TCP to port 9000	Brute-Force SSH
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:58 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-28 00:51:56 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.244 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 19:51:49.162538 2025] [security2:error] [pid 20676:tid 20676] [client 216.26.248.244:35769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawaiivacations.com"] [uri "/.git/HEAD"] [unique_id "aVB_JZzCSDPvHxZ-3cHkHAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 17:38:28 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.244 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 12:38:20.813574 2025] [security2:error] [pid 14417:tid 14417] [client 216.26.248.244:52421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackweddingfavors.com"] [uri "/.env"] [unique_id "aVAZjE2ZQbD4PSR7Gqs4wgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 16:21:14 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.244 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 11:21:06.904175 2025] [security2:error] [pid 1589:tid 1589] [client 216.26.248.244:16395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lesbidrawn.com"] [uri "/.env"] [unique_id "aVAHctZvj9GXCI7G3gzl6QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Swiptly	2025-12-27 07:48:01 (8 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 182.253.171.213

🇷🇺 178.215.146.80

🇺🇸 173.249.254.101

🇧🇷 170.245.10.21

🇺🇸 104.152.57.231

🇳🇬 102.88.137.213

🇸🇪 94.254.25.158

🇬🇧 85.203.46.24

🇩🇪 69.5.169.189

🇷🇺 62.76.73.53

🇰🇷 59.14.170.169

🇰🇷 211.223.107.86

🇨🇴 190.29.27.34

🇩🇪 185.208.172.54

🇧🇷 177.221.179.37

🇺🇸 172.235.33.195

🇸🇬 161.118.206.255

🇺🇸 159.223.157.20

🇻🇳 113.161.149.20

🇧🇩 103.153.170.223