JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.236.27

216.26.236.27 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 7%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.236.27

Whois 216.26.236.27

IP Abuse Reports for 216.26.236.27:

This IP address has been reported a total of 29 times from 13 distinct sources. 216.26.236.27 was first reported on September 29th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-04-21 13:36:22 (1 month ago)	[TueApr2115:36:20.2668772026][security2:error][pid3025358:tid3025373][client216.26.236.27:0]ModSecur ... show more [TueApr2115:36:20.2668772026][security2:error][pid3025358:tid3025373][client216.26.236.27:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"dgtime.ch\"][uri\"/dgtime.sql\"][unique_id\"aed9VBhJ3UcICK2T19yWPQAAAQw\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-04-12 05:43:15 (1 month ago)	Attempt to scan vulnerabilities	Hacking
🇱🇻 garmtech.com	2026-03-28 21:49:50 (2 months ago)	IM360 WAF: Laravel .env file access	Web App Attack
🇩🇪 MusicLibrary	2026-03-05 08:09:56 (3 months ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-09 22:31:49 (3 months ago)	Blocking for trying to access an exploit file: /wp/.git/config	Hacking
🇺🇸 TPI-Abuse	2025-11-24 04:52:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.27 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:51:50.659093 2025] [security2:error] [pid 20830:tid 20830] [client 216.26.236.27:55601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.menagri.com"] [uri "/.git/HEAD"] [unique_id "aSPkZsk8L6X2LaBI4vKh7wAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Thaliruth	2025-11-24 04:30:55 (6 months ago)	default:80 216.26.236.27 - - [24/Nov/2025:05:30:53 +0100] "GET /.aws/credentials HTTP/1.0" 404 433 " ... show more default:80 216.26.236.27 - - [24/Nov/2025:05:30:53 +0100] "GET /.aws/credentials HTTP/1.0" 404 433 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" 216.26.236.27 - - [24/Nov/2025:05:30:53 +0100] "GET /.aws/credentials HTTP/1.1" 404 269 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" ... show less	Brute-Force Web App Attack
Anonymous	2025-11-14 03:20:37 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-02 14:36:37 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:09:33	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2025-10-27 16:55:23 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.27 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.27 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-22 21:02:00 (7 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.22 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.22 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 21:15:51 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-17 04:23:27 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-16 10:21:17 (7 months ago)	GlobalProtect login attempts with user jmccornack.	VPN IP Brute-Force
Anonymous	2025-10-16 04:55:24 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.16 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.16 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.223.152.145

🇩🇪 85.215.206.227

🇺🇸 18.226.84.243

🇺🇸 207.97.180.78

🇦🇺 202.191.63.159

🇪🇸 92.249.8.40

🇫🇷 89.92.56.49

🇩🇪 51.77.92.46

🇺🇸 47.254.80.201

🇹🇷 46.196.64.27

🇯🇴 46.185.169.161

🇭🇰 45.249.247.165

🇮🇳 34.126.218.126

🇺🇸 198.11.172.96

🇺🇦 194.44.140.199

🇧🇷 191.41.227.2

🇫🇷 89.82.176.55

🇸🇾 89.43.133.243

🇷🇴 80.94.92.182

🇸🇦 46.184.44.15