JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.232.47

216.26.232.47 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.232.47

Whois 216.26.232.47

IP Abuse Reports for 216.26.232.47:

This IP address has been reported a total of 29 times from 15 distinct sources. 216.26.232.47 was first reported on September 28th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Ben Schoolland	2026-09-17 12:41:12 (1 day ago)	Requested known WordPress backdoor/scanner-only paths (config backups, .env, .git/config). No legiti ... show more Requested known WordPress backdoor/scanner-only paths (config backups, .env, .git/config). No legitimate use. show less	Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-09-01 02:29:56 (2 weeks ago)	Web App Attack	Web App Attack
🇱🇻 garmtech.com	2026-07-26 07:09:49 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-09.216.26.232.47.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-09.216.26.232.47.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇪🇸 librebit	2026-05-17 04:39:11 (4 months ago)	Brute force	Brute-Force
🇫🇷 debaba	2026-02-09 20:53:15 (7 months ago)	[09/Feb/2026:20:52:48.232075 +0000] aYpJH2EpJlGfZhZrJnl2UQAAAAM 216.26.232.47 44582 127.0.0.1 7081 [ ... show more [09/Feb/2026:20:52:48.232075 +0000] aYpJH2EpJlGfZhZrJnl2UQAAAAM 216.26.232.47 44582 127.0.0.1 7081 [09/Feb/2026:20:53:05.625174 +0000] aYpJMS_k8zuflJI ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:12:04 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:12:01.436915 2025] [security2:error] [pid 30021:tid 30021] [client 216.26.232.47:25513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "decisionsciencebooks.com"] [uri "/.git/HEAD"] [unique_id "aVINoY4Dr2TDL7ZZ9wEvcAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:44:29 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:44:22.821642 2025] [security2:error] [pid 26200:tid 26200] [client 216.26.232.47:49031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dannyvanryswyk.com"] [uri "/.git/HEAD"] [unique_id "aVIHJrHjLeE1m2vJa6hfWAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 03:55:47 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:55:41.030587 2025] [security2:error] [pid 10423:tid 10423] [client 216.26.232.47:52555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coolcustomweddingproducts.com"] [uri "/.git/HEAD"] [unique_id "aVH7vdnj2xkkwi5l7SYGEwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-28 08:54:18 (8 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:49:07 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:48:21.261173 2025] [security2:error] [pid 134161:tid 134198] [client 216.26.232.47:47025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dermatologistcoloradosprings.com"] [uri "/.env"] [unique_id "aSQNxRfbvyHppNR9RqJ1hQAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:33:48 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:33:42.417155 2025] [security2:error] [pid 18539:tid 18539] [client 216.26.232.47:10611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.deborbonfoundation.org"] [uri "/.env"] [unique_id "aSQKVjNg5lVvkdkosinvkAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:32:53 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.232.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:32:43.886216 2025] [security2:error] [pid 20156:tid 20156] [client 216.26.232.47:10939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.penninesolutions.com"] [uri "/.git/HEAD"] [unique_id "aSPf6_CDqchwYnKmSJQcwwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 22:15:12 (10 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-07 20:09:27 (10 months ago)		Bad Web Bot Web App Attack
🇧🇪 madeit	2025-11-04 16:00:30 (10 months ago)		Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.90.26.62

🇨🇴 161.18.142.86

🇷🇴 193.32.162.71

🇧🇷 177.152.146.249

🇳🇱 167.99.210.137

🇧🇷 104.252.222.224

🇺🇸 66.132.186.129

🇺🇸 50.35.168.148

🇧🇷 45.170.239.27

🇺🇸 208.83.230.62

🇧🇷 191.242.53.219

🇺🇸 172.252.58.13

🇺🇸 162.216.149.106

🇺🇸 152.163.139.57

🇫🇷 91.196.152.95

🇺🇸 20.65.171.51

🇺🇸 162.216.150.242

🇳🇱 45.148.10.240

🇬🇧 35.203.210.125

🇧🇪 34.140.132.132