JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.236.196

216.26.236.196 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.236.196

Whois 216.26.236.196

IP Abuse Reports for 216.26.236.196:

This IP address has been reported a total of 16 times from 7 distinct sources. 216.26.236.196 was first reported on September 29th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-05-17 05:13:39 (2 weeks ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-01-13 10:47:13 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 05:47:08.778125 2026] [security2:error] [pid 4157:tid 4157] [client 216.26.236.196:47167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acctusa.net"] [uri "/.svn/wc.db"] [unique_id "aWYirJKWp_NPjTaOs1tLSgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:56:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:56:18.548435 2025] [security2:error] [pid 25717:tid 25717] [client 216.26.236.196:16559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sevenspiritualstages.com"] [uri "/.svn/wc.db"] [unique_id "aSVTEu68nrVQ9WLvZSMaxgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:34:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:34:10.579490 2025] [security2:error] [pid 21948:tid 21948] [client 216.26.236.196:43175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.coconut-homes.com"] [uri "/.git/HEAD"] [unique_id "aSVN4gbvqOhxP73x3Q4wkAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:13:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:13:26.146406 2025] [security2:error] [pid 18194:tid 18289] [client 216.26.236.196:28055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ellicottville.net"] [uri "/.svn/wc.db"] [unique_id "aSPpdu9urIyQu8V3f-3ktwAAAIU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:20:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:20:35.006658 2025] [security2:error] [pid 6412:tid 6418] [client 216.26.236.196:38721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atheistink.xxxmain.com"] [uri "/.svn/wc.db"] [unique_id "aSPdE0yDoMLJzUy1IP54oAAAAMQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:23:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:23:24.356546 2025] [security2:error] [pid 6529:tid 6529] [client 216.26.236.196:24495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jordanliberman.com"] [uri "/.svn/wc.db"] [unique_id "aSPPrJlvVn7_VfTFNsov4gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 04:52:36 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-02 18:15:19 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:23:20	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2025-10-16 05:48:00 (7 months ago)	Unauthorized connection attempt	Brute-Force
Anonymous	2025-10-15 23:42:17 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.15 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.15 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-14 03:52:54 (7 months ago)	GlobalProtect login attempts with user jhames.	VPN IP Brute-Force
Anonymous	2025-10-13 22:33:13 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.13 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.13 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 22:05:10 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-02 10:56:21 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.02 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.02 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.160

🇹🇼 111.253.92.137

🇺🇸 107.172.80.207

🇷🇴 92.118.39.210

🇨🇳 14.103.75.9

🇨🇳 14.18.122.240

🇸🇬 8.222.199.76

🇨🇳 221.238.15.50

🇺🇸 216.180.246.80

🇩🇪 213.209.159.242

🇺🇸 206.221.176.152

🇱🇹 185.169.4.231

🇧🇯 154.127.46.68

🇺🇸 136.31.12.107

🇺🇸 45.58.52.25

🇬🇧 35.203.210.23

🇰🇷 218.149.228.175

🇧🇷 170.231.198.48

🇺🇸 136.114.227.88

🇺🇸 135.119.106.236