JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.234.57

216.26.234.57 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 29%: ?

29%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.234.57

Whois 216.26.234.57

IP Abuse Reports for 216.26.234.57:

This IP address has been reported a total of 30 times from 18 distinct sources. 216.26.234.57 was first reported on September 26th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-17 19:20:55 (2 hours ago)	[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 216.26.234.57 - - [17/Oct/2026:21:20:29 +0200] "GET /.env.php.tmp HTTP/1.1" 302 7339 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-10 09:23:55 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.teddypot.cloud \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-10 03:52:34 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.teddypot.space \| URI: /info.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇦🇺 Block Rockin' Beats	2026-09-28 19:57:03 (2 weeks ago)	Scanning for exploitable scripts	Hacking Web App Attack
🇮🇩 securejdprop	2026-09-27 20:13:14 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 68). show less	Hacking Web App Attack
🇩🇪 raph	2026-09-24 06:57:38 (3 weeks ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-05-07 15:22:00 (5 months ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 Axel	2026-05-06 01:01:45 (5 months ago)	[2026-05-06 01:01:45 UTC] Honeypot WebLogic connection attempt \| AXFRA HONEYPOT	Web App Attack
Anonymous	2026-05-01 10:11:05 (5 months ago)	Forum/form spam	Web Spam
Anonymous	2026-02-28 21:56:07 (7 months ago)	Forum/form spam	Web Spam
🇺🇸 windowsforum	2026-02-19 19:34:44 (7 months ago)	Spam bot registration: triggers=timing, js_challenge, inv_honeypot, pow_fail, url, password_confirm, ... show more Spam bot registration: triggers=timing, js_challenge, inv_honeypot, pow_fail, url, password_confirm, username=JeremyConi show less	Web Spam Bad Web Bot
Anonymous	2026-01-12 07:45:59 (9 months ago)	wordpress-trap	Web App Attack
🇸🇪 SkyDancer	2025-12-31 00:32:57 (9 months ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇩🇪 iNetWorker	2025-12-30 09:54:23 (9 months ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:13:46 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.234.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.234.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:13:39.573091 2025] [security2:error] [pid 446:tid 446] [client 216.26.234.57:13921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kwijlen.com"] [uri "/.git/HEAD"] [unique_id "aVH_8w3qhM7cF38vfaqc6AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇳 102.157.138.171

🇺🇸 69.167.30.7

🇺🇸 40.67.178.198

🇯🇵 35.200.101.75

🇺🇸 2a03:2880:f212:1c9:face:b00c:0:43fe

🇮🇹 217.26.178.3

🇩🇪 213.209.159.25

🇲🇲 103.83.190.122

🇳🇱 77.239.124.154

🇧🇪 35.205.116.134

🇺🇸 32.196.38.110

🇧🇷 186.251.71.202

🇺🇸 136.65.74.74

🇨🇳 115.222.147.112

🇳🇱 109.160.32.137

🇳🇱 45.74.59.2

🇧🇷 177.200.68.30

🇰🇷 112.161.75.207

🇨🇦 38.135.179.65

🇩🇪 34.89.133.29