JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.233.130

216.26.233.130 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 22%: ?

22%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.233.130

Whois 216.26.233.130

IP Abuse Reports for 216.26.233.130:

This IP address has been reported a total of 37 times from 16 distinct sources. 216.26.233.130 was first reported on September 28th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 sgofferj	2026-07-04 01:49:47 (3 hours ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇮🇹 Francesco Ippoliti	2026-07-03 21:12:14 (8 hours ago)	[Jul 3 23:12:12] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:501@154 ... show more [Jul 3 23:12:12] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '216.26.233.130:12897' (callid: 7585675a28edf9c335d525b430a8ba8e) - No matching endpoint found [Jul 3 23:12:12] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '216.26.233.130:12897' (callid: 7585675a28edf9c335d525b430a8ba8e) - No matching endpoint found ... show less	Brute-Force Port Scan
🇺🇸 oncord	2026-06-03 15:28:17 (1 month ago)	Form spam	Web Spam
🇦🇺 oncord	2026-05-30 16:44:44 (1 month ago)	Form spam	Web Spam
🇦🇺 oncord	2026-05-28 03:11:38 (1 month ago)	Form spam	Web Spam
🇱🇻 garmtech.com	2026-05-24 03:04:57 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-04.216.26.233.130.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-04.216.26.233.130.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 4server	2026-04-27 08:27:27 (2 months ago)	[MonApr2710:27:24.4340992026][security2:error][pid3211301:tid3211316][client216.26.233.130:0]ModSecu ... show more [MonApr2710:27:24.4340992026][security2:error][pid3211301:tid3211316][client216.26.233.130:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"[\\\\\\\\n\\\\\\\\r]\"atARGS_GET:messaggio.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"143\"][id\"390722\"][rev\"5\"][msg\"Atomicorp.comWAFRules:HTTPHeaderInjectionAttackviapayload\(CR/LFdetected\)\"][data\"MatchedData:\\\\x0dfoundwithinARGS_GET:messaggio:Hellothere\,\\\\x0d\\\\x0a\\\\x0d\\\\x0aCameacrossyourwebsiteandthoughtwe\\\\xe2\\\\x80\\\\x99dmentionsomethinguseful.WeputtogetheraplatformwhereyoucanproduceAImediaincludingshortads\,integrateyoursocials\,andmanagepublishingeasily\,andthere\\\\xe2\\\\x80\\\\x99sacompletelyfreeplan.\\\\x0d\\\\x0a\\\\x0d\\\\x0aNopressure\,justfreetoolsifyouwanttotrythem.\\\\x0d\\\\x0a\\\\x0d\\\\x0aCheckitoutifyou\'recurious:https://letstokugc.com/\\\\x0d\\\\x0a\\\\x0d\\\\x0aKindRegards\,...\"][severity\"CRITICAL\"][hostname\"akastudio.ch\"][uri\"/\"][unique_id\"ae8d7N6MPm3HzcrN4DTM0AAAAAQ\"]\,refere show less	Port Scan Brute-Force Web App Attack
🇦🇺 oncord	2026-04-25 23:38:05 (2 months ago)	Form spam	Web Spam
🇫🇷 conseilgouz	2026-04-08 23:24:50 (2 months ago)	upw-(visforms) : try to access forms...	Hacking
🇱🇻 garmtech.com	2026-04-08 19:58:41 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-58.216.26.233.130.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-58.216.26.233.130.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 oncord	2026-04-03 20:30:40 (3 months ago)	Form spam	Web Spam
🇺🇸 myagent.site	2026-01-15 08:38:49 (5 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-11-26 10:00:13 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.233.130 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.233.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:00:00.961803 2025] [security2:error] [pid 5866:tid 5866] [client 216.26.233.130:54269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.enfiestate.com"] [uri "/.env"] [unique_id "aSbPoDG35VT9xS3JNBySCgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:48:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.233.130 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.233.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:48:19.214904 2025] [security2:error] [pid 21863:tid 21863] [client 216.26.233.130:26521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jbservicesinc.net"] [uri "/.env"] [unique_id "aSaUo3jhz8NbqkvF-M0CAgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:50:42 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.233.130 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.233.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:50:35.979258 2025] [security2:error] [pid 24639:tid 24639] [client 216.26.233.130:60499] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.crystalvisionsart.com"] [uri "/.svn/wc.db"] [unique_id "aSZO240K1z40ZQ10InrBSQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.78.182.74

🇵🇰 203.135.42.52

🇧🇷 192.141.107.78

🇰🇷 125.129.142.200

🇬🇧 45.133.173.62

🇺🇸 44.215.28.32

🇵🇭 203.160.161.43

🇺🇸 162.216.150.80

🇭🇰 103.243.24.124

🇬🇧 92.31.3.175

🇺🇸 72.201.64.150

🇺🇸 66.132.172.137

🇧🇪 44.11.44.37

🇮🇩 36.77.112.17

🇺🇸 20.65.193.205

🇰🇷 14.45.131.108

🇮🇳 210.212.227.74

🇩🇪 194.88.98.104

🇨🇳 182.135.63.175

🇭🇰 150.5.169.138