JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.235.64

216.26.235.64 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 28%: ?

28%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.235.64

Whois 216.26.235.64

IP Abuse Reports for 216.26.235.64:

This IP address has been reported a total of 33 times from 17 distinct sources. 216.26.235.64 was first reported on September 27th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 securejdprop	2026-06-12 03:14:32 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 65). Ip 216.26.235.64 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-12 03:14:31.073479713 +0000 UTC show less	Hacking Web App Attack
🇺🇸 mnsf	2026-06-01 13:07:57 (1 week ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇦🇺 oncord	2026-05-31 21:10:16 (1 week ago)	Form spam	Web Spam
🇬🇧 PeravixGroup	2026-05-11 10:20:53 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-07 00:42:54 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.235.64 2026-05 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.235.64 2026-05-06 13:43:17 /console/login/LoginForm.jsp 2026-05-06 13:43:21 /management/tenant-monitoring/servers 2026-05-06 13:43:26 /wls-wsat/CoordinatorPortType 2026-05-06 13:43:18 /weblogic/ready 2026-05-06 13:43:24 /config/config.xml show less	Web App Attack
🇸🇬 securejdprop	2026-04-29 05:46:10 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 63). Ip 216.26.235.64 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-04-29 05:46:09.730682062 +0000 UTC show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-03-14 22:49:13 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-49.216.26.235.64.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-49.216.26.235.64.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-03-05 19:50:23 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-50.216.26.235.64.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-50.216.26.235.64.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇨🇭 backslash	2025-12-23 01:55:03 (5 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 dklueh79	2025-12-11 07:20:56 (6 months ago)	Probe for vulnerabilities. Path attempted: /.env	Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 15:00:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.235.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.235.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 10:00:10.508912 2025] [security2:error] [pid 7306:tid 7306] [client 216.26.235.64:28831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ferienwohnungen-eva.com"] [uri "/.svn/wc.db"] [unique_id "aTbn-hBV_XCgPACq8bzssAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2025-12-08 02:34:49 (6 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Hacking Web App Attack
🇳🇱 i-turnradio.nl	2025-12-08 01:00:13 (6 months ago)	2025-12-08 @ 02:00:12 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:46:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.235.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.235.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:46:42.266511 2025] [security2:error] [pid 8156:tid 8190] [client 216.26.235.64:42375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jedelectric.com"] [uri "/.env"] [unique_id "aTK4EhvhP3RrMJs32kjXLQAAAYQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 04:56:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.235.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.235.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:55:55.006805 2025] [security2:error] [pid 25554:tid 25568] [client 216.26.235.64:28365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livetalkusa.com"] [uri "/.env"] [unique_id "aTJl229XIUilQo4cCInwogAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.186.68

🇬🇧 193.163.125.211

🇺🇸 172.191.239.155

🇭🇷 141.136.137.24

🇮🇳 135.235.138.43

🇫🇷 91.231.89.255

🇧🇬 91.92.88.195

🇫🇷 85.217.140.37

🇨🇭 85.2.29.146

🇬🇪 78.40.106.6

🇺🇸 20.169.105.57

🇨🇳 14.103.123.75

🇬🇧 5.226.140.61

🇮🇳 223.228.180.97

🇺🇸 205.210.31.95

🇬🇧 194.50.235.144

🇮🇱 192.116.46.19

🇳🇱 185.242.226.8

🇫🇷 176.137.193.206

🇺🇸 172.239.51.96