JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.248.44

216.26.248.44 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.248.44

Whois 216.26.248.44

IP Abuse Reports for 216.26.248.44:

This IP address has been reported a total of 16 times from 10 distinct sources. 216.26.248.44 was first reported on October 16th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-08-22 20:45:31 (2 hours ago)	216.26.248.44 - - [22/Aug/2026:22:45:31 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 216.26.248.44 - - [22/Aug/2026:22:45:31 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" show less	Hacking Web App Attack
🇫🇷 Sklurk	2026-07-08 01:20:52 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-20 04:21:55 (2 months ago)	Web App Attack	Web App Attack
🇧🇪 cmbplf	2026-04-30 12:49:11 (3 months ago)	4.745 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇳🇱 TCATERDSBE	2026-03-19 13:34:00 (5 months ago)	SQL Injection	SQL Injection
Anonymous	2025-12-16 03:41:33 (8 months ago)	2025-12-16T05:41:33.544595+02:00 zanati wp(www.sahpa.co.za)[978186]: Blocked authentication attempt ... show more 2025-12-16T05:41:33.544595+02:00 zanati wp(www.sahpa.co.za)[978186]: Blocked authentication attempt for [email protected] from 216.26.248.44 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-09 20:28:38 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 15:28:33.642060 2025] [security2:error] [pid 31960:tid 31960] [client 216.26.248.44:39889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lifevsai.com"] [uri "/.git/HEAD"] [unique_id "aTiGcX7nhgq0D2hNcSa6yAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-09 16:06:23 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 11:06:15.603133 2025] [security2:error] [pid 20425:tid 20425] [client 216.26.248.44:57947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "entertainer-review.com"] [uri "/.env"] [unique_id "aThI95vi0JwbyysYSbqnAAAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 23:03:13 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 18:03:09.292860 2025] [security2:error] [pid 26039:tid 26039] [client 216.26.248.44:29419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swiss-pac.com"] [uri "/.env"] [unique_id "aTdZLTBZYwn1mNGFPP3I9gAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2025-12-08 04:11:21 (8 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-12-07 15:42:49 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:42:43.974502 2025] [security2:error] [pid 26522:tid 26522] [client 216.26.248.44:50333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wisk.org"] [uri "/.svn/wc.db"] [unique_id "aTWgcxQkfK8bkXaoFwAfVwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 13:24:53 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:24:45.684597 2025] [security2:error] [pid 25115:tid 25115] [client 216.26.248.44:58961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greenroomonline.org"] [uri "/.env"] [unique_id "aTWAHSelxwFS341RveD9VAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:28:11 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.248.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:28:04.211595 2025] [security2:error] [pid 7287:tid 7287] [client 216.26.248.44:58077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.step1nutrition.com"] [uri "/.git/HEAD"] [unique_id "aSVahHwk_QaMEfJNURDG-AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 chronos	2025-11-25 01:43:22 (8 months ago)	[AUTORAVALT][[24/11/2025 - 22:43:22 -03:00 UTC] Attack from [RIPE Network Coordination Centre] [216. ... show more [AUTORAVALT][[24/11/2025 - 22:43:22 -03:00 UTC] Attack from [RIPE Network Coordination Centre] [216.26.248.44] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various othe] ... show less	Hacking Web App Attack
Anonymous	2025-10-17 18:53:38 (10 months ago)	Failed Wordpress login	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 158.174.211.17

🇨🇳 115.153.121.41

🇺🇸 44.201.3.171

🇳🇱 195.178.110.137

🇺🇸 134.209.49.207

🇨🇳 120.48.122.158

🇺🇸 17.241.75.238

🇺🇸 3.145.13.241

🇫🇷 2400:cb00:986:1000:1648:62dd:7fe5:59d

🇨🇳 222.90.58.170

🇨🇳 113.219.177.95

🇺🇸 54.186.219.124

🇳🇱 45.148.10.151

🇮🇳 40.80.84.77

🇮🇩 103.46.186.105

🇨🇳 101.205.122.213

🇩🇪 69.5.169.46

🇺🇸 54.197.86.219

🇨🇦 54.39.0.105

🇧🇷 16.5.0.133