JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.248.37

216.26.248.37 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 12%: ?

12%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.248.37

Whois 216.26.248.37

IP Abuse Reports for 216.26.248.37:

This IP address has been reported a total of 26 times from 12 distinct sources. 216.26.248.37 was first reported on November 24th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 Countryman	2026-09-05 00:10:02 (1 week ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇸🇪 shab	2026-09-03 11:33:19 (1 week ago)	Suspicious VPN activity	Brute-Force
🇮🇩 securejdprop	2026-07-12 04:50:53 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 67). Ip 216.26.248.37 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-07-12 04:50:51.090508488 +0000 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-12 03:59:53 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 216.26.248.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 216.26.248.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 23:59:48.571258 2026] [security2:error] [pid 31210:tid 31213] [client 216.26.248.37:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.mindgardens.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mindgardens.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alMRNMKeM34paqJsffBPtwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-07-09 01:19:04 (2 months ago)	Web App Attack	Web App Attack
🇩🇪 LRob	2026-06-22 19:17:04 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-05-30 07:47:42 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-47.216.26.248.37.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-47.216.26.248.37.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 FeG Deutschland	2026-05-09 23:29:39 (4 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇱🇻 garmtech.com	2026-05-04 23:50:27 (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-50.216.26.248.37.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-50.216.26.248.37.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-04-17 13:35:14 (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-35.216.26.248.37.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-35.216.26.248.37.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 oncord	2026-04-03 05:35:43 (5 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-03-28 15:26:20 (5 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-03-20 09:33:06 (5 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-12-28 10:30:56 (8 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-12-08 04:52:33 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 23:52:29.616438 2025] [security2:error] [pid 10143:tid 10143] [client 216.26.248.37:36171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "machineryenchantress.com"] [uri "/.svn/wc.db"] [unique_id "aTZZjfE2RrVoij1uyd7nPAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 212.73.158.253

🇺🇸 195.184.76.131

🇦🇷 186.19.45.212

🇺🇸 173.214.163.142

🇸🇪 170.168.28.122

🇩🇪 167.94.146.51

🇺🇸 166.62.94.210

🇺🇸 135.26.3.15

🇸🇬 128.199.75.123

🇮🇩 103.214.100.4

🇸🇪 90.133.178.99

🇺🇸 66.132.172.195

🇨🇳 45.120.101.16

🇸🇬 43.134.54.246

🇹🇭 210.1.59.163

🇧🇷 205.210.31.246

🇭🇰 165.154.224.136

🇺🇸 157.230.12.173

🇺🇸 143.198.162.57

🇺🇸 142.111.152.23