JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.253.48

216.26.253.48 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 29%: ?

29%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.253.48

Whois 216.26.253.48

IP Abuse Reports for 216.26.253.48:

This IP address has been reported a total of 19 times from 10 distinct sources. 216.26.253.48 was first reported on November 24th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-08 04:11:57 (4 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 Sklurk	2026-07-07 15:29:09 (17 hours ago)	Web App Attack	Web App Attack
🇫🇷 ELYAZ	2026-06-30 19:30:38 (1 week ago)	(y4) Failed scan -byebye- from 216.26.253.48 (FR/France/-): (CF_ENABLE)	Hacking
🇲🇹 Malta	2026-06-29 21:11:15 (1 week ago)	216.26.253.48 - - [29/Jun/2026:23:11:15 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh ... show more 216.26.253.48 - - [29/Jun/2026:23:11:15 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇲🇹 Malta	2026-06-27 18:31:49 (1 week ago)	216.26.253.48 - - [27/Jun/2026:20:31:49 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 216.26.253.48 - - [27/Jun/2026:20:31:49 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇦🇺 MAGIC	2026-01-19 02:09:13 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 conseilgouz	2026-01-03 11:14:09 (6 months ago)	upe-12 : Block return, carriage return, ... characters=>/index.php?catid=8&catid=%27&id=72&a ... show more upe-12 : Block return, carriage return, ... characters=>/index.php?catid=8&catid=%27&id=72&option=com_content&view=article(') show less	Hacking
🇦🇺 MAGIC	2025-12-29 03:10:23 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2025-12-07 00:08:20 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-26 10:53:10 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:53:05.265678 2025] [security2:error] [pid 25417:tid 25417] [client 216.26.253.48:55245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jaragoodrich.com"] [uri "/.svn/wc.db"] [unique_id "aSbcEXSgEVWdnVSPLsyWOQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:45:29 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:45:26.437062 2025] [security2:error] [pid 8847:tid 8847] [client 216.26.253.48:46731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.daruwala.net"] [uri "/.env"] [unique_id "aSa-JtiO82yD1WoD9raMbAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 07:07:43 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:07:36.415605 2025] [security2:error] [pid 26461:tid 26461] [client 216.26.253.48:37369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.electricmeatgrinder.com"] [uri "/.env"] [unique_id "aSanOOZBgkj3XTY5uxarpwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRNP	2025-11-26 05:14:27 (7 months ago)	_:80 216.26.253.48 - - [26/Nov/2025:05:14:27 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (i ... show more _:80 216.26.253.48 - - [26/Nov/2025:05:14:27 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:59:51 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.253.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.253.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:59:46.177614 2025] [security2:error] [pid 14244:tid 14244] [client 216.26.253.48:22097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.jiggaboojones.com"] [uri "/.git/HEAD"] [unique_id "aSZRAllmLJEsrGrzRWofFgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 217.76.63.90

🇨🇳 203.2.114.29

🇰🇭 202.79.29.108

🇬🇧 194.164.127.235

🇧🇷 189.15.231.195

🇺🇸 159.89.133.65

🇮🇳 103.142.162.209

🇺🇸 103.4.250.245

🇺🇸 69.164.217.245

🇸🇬 47.82.48.172

🇺🇸 45.79.181.179

🇭🇰 43.128.3.201

🇷🇴 2.57.121.25

🇵🇰 203.175.74.145

🇫🇷 173.212.198.79

🇺🇸 172.253.251.55

🇺🇸 162.216.149.103

🇺🇸 150.136.229.253

🇳🇱 77.83.39.197

🇩🇪 63.179.1.197