JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.234.48

216.26.234.48 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 32%: ?

32%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.234.48

Whois 216.26.234.48

IP Abuse Reports for 216.26.234.48:

This IP address has been reported a total of 30 times from 19 distinct sources. 216.26.234.48 was first reported on September 30th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RLDD	2026-10-27 13:15:35 (1 hour ago)	WP login attempts -exo	Brute-Force
🇫🇷 Sklurk	2026-10-26 00:58:50 (1 day ago)	Web App Attack	Web App Attack
🇵🇱 Budyn	2026-10-23 16:40:20 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.website \| URI: /wp-admin/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) obsidian/1.8.10 Chrome/132.0.6834.196 Electron/34.2.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"CA","Cf-Connecting-Ip":"216.26.234.48","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document","Referer":"https:\/\/astropot.website\/","Acce show less	Bad Web Bot Web App Attack
🇮🇩 securejdprop	2026-10-09 11:36:08 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 65). show less	Hacking Web App Attack
🇨🇭 backslash	2026-09-28 10:06:02 (4 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇫🇷 Sklurk	2026-08-03 03:53:50 (2 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-31 01:43:14 (2 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-30 00:47:25 (2 months ago)	Web App Attack	Web App Attack
🇬🇧 PeravixGroup	2026-05-08 22:50:51 (5 months ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 cyfordtechnologies.com	2026-04-30 19:49:37 (5 months ago)	High-abuse ASN prefix: 216.26. : Reported by Cyford API	Web App Attack
🇬🇧 relianoid.com	2026-03-04 01:42:48 (7 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2026-03-03 11:32:08 (7 months ago)	Forum/form spam	Web Spam
Anonymous	2025-12-22 18:20:49 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.22 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.22 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 09:02:37 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.234.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.234.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:02:30.009560 2025] [security2:error] [pid 17611:tid 17611] [client 216.26.234.48:42863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thingstodonude.com"] [uri "/.svn/wc.db"] [unique_id "aSQfJmq1fnb9E9iH1FCfbwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:24:38 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.234.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.234.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:24:32.848545 2025] [security2:error] [pid 12102:tid 12107] [client 216.26.234.48:26285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vivierae.com"] [uri "/.env"] [unique_id "aSQWQPW9q1mxetu5lC-jywAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.32

🇨🇳 118.186.18.243

🇺🇸 68.183.31.55

🇬🇧 57.128.190.44

🇳🇱 45.148.10.151

🇨🇳 39.105.108.6

🇨🇳 8.155.160.186

🇩🇪 167.94.146.72

🇷🇺 95.31.220.49

🇺🇸 91.230.168.219

🇵🇱 83.24.6.105

🇺🇸 50.6.111.141

🇳🇱 45.148.10.21

🇧🇷 35.198.1.42

🇹🇭 27.254.190.148

🇮🇱 2.55.122.202

🇭🇰 216.118.231.170

🇳🇱 138.226.239.53

🇩🇪 130.12.180.163

🇨🇳 123.13.50.189