JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.253.244

216.26.253.244 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 45%: ?

45%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.253.244

Whois 216.26.253.244

IP Abuse Reports for 216.26.253.244:

This IP address has been reported a total of 23 times from 18 distinct sources. 216.26.253.244 was first reported on October 7th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-06-17 10:46:14 (1 day ago)	(y4) Failed scan -byebye- from 216.26.253.244 (FR/France/-): (CF_ENABLE)	Hacking
Anonymous	2026-06-17 04:50:58 (1 day ago)	216.26.253.244 - - [17/Jun/2026:12:50:57 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "https://www.fac ... show more 216.26.253.244 - - [17/Jun/2026:12:50:57 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-06-16 20:58:04 (1 day ago)	Wordfence waf block on decarcerationnation	Web App Attack
🇩🇪 raph	2026-06-14 14:34:01 (4 days ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇩🇪 pltcldvlpr	2026-06-10 04:24:40 (1 week ago)	CMS/framework probe: 216.26.253.244 - - [10/Jun/2026:06:24:40 +0200] "GET /phpmyadmin.sql HTTP/1.1" ... show more CMS/framework probe: 216.26.253.244 - - [10/Jun/2026:06:24:40 +0200] "GET /phpmyadmin.sql HTTP/1.1" 404 10609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" asn=200373 org="3xK Tech GmbH" country=FR ... show less	Web App Attack
🇩🇪 filstal.org	2026-06-09 23:08:28 (1 week ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 show less	Hacking Brute-Force Web App Attack
🇩🇪 Carsten	2026-06-07 21:55:40 (1 week ago)	bad web bot	Port Scan
🇱🇻 garmtech.com	2026-05-13 01:36:49 (1 month ago)	IM360 WAF: Laravel .env file access	Web App Attack
🇦🇺 2000cn.com.au	2026-05-13 01:22:52 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-02-19 04:28:03 (3 months ago)	Bot / scanning and/or hacking attempts: GET /test/.git/config HTTP/1.1, GET /dev/.git/config HTTP/1. ... show more Bot / scanning and/or hacking attempts: GET /test/.git/config HTTP/1.1, GET /dev/.git/config HTTP/1.1, GET /admin/.git/config HTTP/1.1, GET /frontend/.env HTTP/1.1, GET /wp/.git/config HTTP/1.1, GET /.env.local HTTP/1.1, GET /.git/config HTTP/1.1, GET /config/.env HTTP/1.1, GET /v2/.git/config HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-01-21 12:26:54 (4 months ago)	"GET /.aws/credentials HTTP/1.1"	Hacking Web App Attack
🇬🇧 Swiptly	2026-01-21 10:15:52 (4 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇺🇸 myagent.site	2026-01-20 21:48:27 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2026-01-20 19:43:57 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.244 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 14:43:50.945129 2026] [security2:error] [pid 27281:tid 27281] [client 216.26.253.244:29051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sieder.com"] [uri "/.env"] [unique_id "aW_a9lh3MgxvlHYdvVkXGwAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-14 21:22:27 (5 months ago)	216.26.253.244 - - [14/Jan/2026:21:22:27 +0000] "GET /.env HTTP/1.1" 302 481 "-" "Mozilla/5.0 (iPhon ... show more 216.26.253.244 - - [14/Jan/2026:21:22:27 +0000] "GET /.env HTTP/1.1" 302 481 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.142.149.178

🇳🇬 102.90.100.36

🇿🇲 74.244.129.234

🇺🇸 64.62.156.207

🇲🇾 49.124.152.222

🇲🇽 187.191.48.4

🇨🇳 183.249.96.139

🇫🇷 172.71.118.241

🇸🇬 152.32.220.188

🇧🇷 143.95.214.121

🇺🇸 135.233.112.24

🇿🇦 105.233.67.36

🇺🇸 74.211.38.164

🇮🇩 69.5.21.13

🇭🇰 47.239.181.240

🇺🇸 23.191.200.43

🇭🇰 20.255.61.0

🇧🇷 20.226.45.125

🇫🇮 173.194.98.17

🇺🇸 172.56.60.26