JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.235.214

216.26.235.214 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.235.214

Whois 216.26.235.214

IP Abuse Reports for 216.26.235.214:

This IP address has been reported a total of 32 times from 19 distinct sources. 216.26.235.214 was first reported on September 27th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-09-18 04:11:45 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇧🇪 Saec	2026-09-17 22:41:13 (2 days ago)	Jarvis auto-ban: Honeypot /wp-login.php via handy.saec.me [CA] ASN:3xK Tech GmbH	Port Scan Web App Attack
🇩🇪 raph	2026-09-17 18:43:48 (2 days ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-08-05 00:56:10 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-31 01:44:06 (1 month ago)	Web App Attack	Web App Attack
🇬🇧 PeravixGroup	2026-05-08 08:31:08 (4 months ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 mnsf	2026-02-15 07:06:00 (7 months ago)	Scanning/Probing (24)	Brute-Force Web App Attack
Anonymous	2026-02-15 05:33:03 (7 months ago)	Bot / scanning and/or hacking attempts: GET /.aws/credentials HTTP/1.1, GET /admin/.git/config HTTP/ ... show more Bot / scanning and/or hacking attempts: GET /.aws/credentials HTTP/1.1, GET /admin/.git/config HTTP/1.1, GET /backup/.git/config HTTP/1.1, GET /backend/.env HTTP/1.1, GET /test/.git/config HTTP/1.1, GET /api/.git/config HTTP/1.1, GET /app/.git/config HTTP/1.1, GET /wp/.git/config HTTP/1.1, GET /.env.save HTTP/1.1, GET /app/.env HTTP/1.1, GET /new/.git/config HTTP/1.1, GET /.git/config HTTP/1.1, GET /frontend/.env HTTP/1.1, GET /site/.git/config HTTP/1.1, GET /config/.env HTTP/1.1, GET /v2/.git/config HTTP/1.1, GET /dev/.git/config HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 dynamix	2026-02-15 05:14:49 (7 months ago)	Multiple WAF Violations	Web App Attack
🇨🇿 sajmon0011	2026-02-15 03:47:01 (7 months ago)	216.26.235.214 - - [15/Feb/2026:04:47:01 +0100] "GET /site/.git/config HTTP/1.1" 404 196 "-" "Mozill ... show more 216.26.235.214 - - [15/Feb/2026:04:47:01 +0100] "GET /site/.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇺🇸 myagent.site	2026-02-15 01:27:32 (7 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇨🇭 backslash	2026-01-16 04:10:03 (8 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:57:06 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-26 02:19:02 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.235.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.235.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:18:55.747898 2025] [security2:error] [pid 22671:tid 22671] [client 216.26.235.214:50757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rhkglobal.com"] [uri "/.svn/wc.db"] [unique_id "aSZjj5IYmJQIEOsqLEHCTgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:36:32 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.235.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.235.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:36:26.473259 2025] [security2:error] [pid 5361:tid 5383] [client 216.26.235.214:11117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southtampaprints.com"] [uri "/.svn/wc.db"] [unique_id "aSZLig6mFNQyT6yLV4LslgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 188.241.217.33

🇸🇬 143.198.212.38

🇮🇩 103.154.81.166

🇧🇷 2400:cb00:597:1000:6fc7:3d0f:1eae:1a46

🇩🇪 213.209.159.238

🇮🇩 203.175.103.186

🇺🇸 159.203.120.106

🇰🇷 121.142.87.218

🇧🇬 109.160.32.96

🇨🇳 106.12.74.119

🇳🇱 94.154.43.111

🇮🇱 82.102.188.117

🇺🇸 65.49.20.113

🇨🇦 51.79.86.230

🇯🇵 20.243.208.191

🇸🇬 20.157.117.15

🇹🇷 2400:cb00:336:1000:2cb7:9e83:cc6b:aeb5

🇭🇰 219.78.240.92

🇹🇼 198.235.24.73

🇺🇸 162.216.150.88