JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.253.247

216.26.253.247 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.253.247

Whois 216.26.253.247

IP Abuse Reports for 216.26.253.247:

This IP address has been reported a total of 11 times from 7 distinct sources. 216.26.253.247 was first reported on November 2nd 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Francesco Ippoliti	2026-07-24 17:57:00 (2 hours ago)	[Jul 24 19:56:59] NOTICE[182193] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:100@15 ... show more [Jul 24 19:56:59] NOTICE[182193] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '216.26.253.247:42563' (callid: e0aea86535b00ae948dfd1003bf435be) - No matching endpoint found [Jul 24 19:56:59] NOTICE[182036] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '216.26.253.247:42563' (callid: e0aea86535b00ae948dfd1003bf435be) - No matching endpoint found ... show less	Brute-Force Port Scan
🇧🇪 voormedia	2026-05-13 18:45:46 (2 months ago)	Accessed trap at '/.aws/credentials'	Web App Attack
🇦🇺 2000cn.com.au	2026-05-10 12:39:49 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇪🇸 10dencehispahard SL	2026-01-26 10:45:00 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-12-29 06:40:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:40:19.886191 2025] [security2:error] [pid 8834:tid 8834] [client 216.26.253.247:23503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "directoryofdogs.com"] [uri "/.env"] [unique_id "aVIiUxIw50XFDaAS_2jhvwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:16:46 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:16:40.656692 2025] [security2:error] [pid 29995:tid 29995] [client 216.26.253.247:33763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "z-mgmt.com"] [uri "/.svn/wc.db"] [unique_id "aVIOuDe1FRVQoDoJvwWtcgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:47:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:47:22.244838 2025] [security2:error] [pid 4330:tid 4330] [client 216.26.253.247:18571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vendor21.com"] [uri "/.svn/wc.db"] [unique_id "aVIH2rp4VezjQ6Yy8JGNMgAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:31:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:31:50.482201 2025] [security2:error] [pid 13238:tid 13238] [client 216.26.253.247:14007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jackieherbach.com"] [uri "/.env"] [unique_id "aVIENsQO6-n_GFat0JPQfwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:00:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:00:20.507299 2025] [security2:error] [pid 8395:tid 8395] [client 216.26.253.247:33341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wexfordcap.com"] [uri "/.svn/wc.db"] [unique_id "aVH81HjvgnJjSiDj0A9WXwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-29 00:54:32 (6 months ago)	2025-12-29T02:54:31.765248+02:00 zanati wp(www.sahpa.co.za)[398020]: Blocked authentication attempt ... show more 2025-12-29T02:54:31.765248+02:00 zanati wp(www.sahpa.co.za)[398020]: Blocked authentication attempt for [email protected] from 216.26.253.247 ... show less	Web App Attack
Anonymous	2025-11-02 13:01:29 (8 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 06:49:47	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.211.153

🇬🇧 2.57.17.220

🇺🇸 216.25.89.117

🇧🇷 179.189.155.154

🇮🇳 103.171.12.165

🇮🇪 34.245.12.231

🇬🇧 5.252.83.151

🇩🇪 158.94.208.56

🇨🇳 101.96.193.131

🇺🇸 47.254.74.209

🇨🇳 39.108.93.153

🇩🇪 4.184.121.217

🇺🇸 2a09:bac1:7680:3d0::501:6

🇵🇰 223.123.35.173

🇳🇱 217.60.195.58

🇦🇷 190.181.100.157

🇮🇳 103.50.5.94

🇺🇸 74.48.45.140

🇹🇼 59.115.15.98

🇳🇱 45.153.34.112