JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.236.66

216.26.236.66 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 31%: ?

31%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.236.66

Whois 216.26.236.66

IP Abuse Reports for 216.26.236.66:

This IP address has been reported a total of 33 times from 14 distinct sources. 216.26.236.66 was first reported on September 27th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-08-31 14:26:10 (12 hours ago)	(wplogin_block) Blocked WP-Login Access Attempt 216.26.236.66 (US/United States/Virginia/Ashburn/-/[ ... show more (wplogin_block) Blocked WP-Login Access Attempt 216.26.236.66 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.26.236.66 - - [31/Aug/2026:17:24:51 +0300] "POST /wp-login.php HTTP/1.1" 503 7315 "https://villa-izabela.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" show less	Port Scan
🇫🇷 ELYAZ	2026-08-31 03:31:05 (23 hours ago)	(wordpress) Failed wordpress login from 216.26.236.66 (US/United States/-): (CF_ENABLE)	Brute-Force
🇩🇪 F242	2026-08-29 19:48:19 (2 days ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇫🇷 Sklurk	2026-08-04 00:46:40 (4 weeks ago)	Web App Attack	Web App Attack
🇨🇿 ddw	2026-07-07 18:20:59 (1 month ago)	WordPress Brute Force Attack.	Hacking Brute-Force Web App Attack
🇲🇽 octageeks.com	2026-07-07 04:21:49 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇽 octageeks.com	2026-07-03 04:16:56 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇹 Malta	2026-07-01 18:41:06 (1 month ago)	216.26.236.66 - - [01/Jul/2026:20:41:06 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh ... show more 216.26.236.66 - - [01/Jul/2026:20:41:06 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇲🇹 Malta	2026-06-29 08:56:22 (2 months ago)	216.26.236.66 - - [29/Jun/2026:10:56:22 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh ... show more 216.26.236.66 - - [29/Jun/2026:10:56:22 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 mnsf	2026-01-01 21:05:54 (7 months ago)	Too many Status 50X (48)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:04:57 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:04:54.567084 2025] [security2:error] [pid 27462:tid 27462] [client 216.26.236.66:28247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.littlehorneng.com"] [uri "/.git/HEAD"] [unique_id "aSU49jcD0sMLFk2f_h3mFwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:23:27 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:23:19.516172 2025] [security2:error] [pid 16988:tid 16988] [client 216.26.236.66:27617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ralserve.net"] [uri "/.env"] [unique_id "aSUvN83NXt-U1tem3jLq9wAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:07:08 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:07:00.227671 2025] [security2:error] [pid 1817001:tid 1817055] [client 216.26.236.66:35341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.sea2er.com"] [uri "/.svn/wc.db"] [unique_id "aSUrZGR1ttxeyDpsCa9NGAAAAZA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:01:54 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:01:46.935898 2025] [security2:error] [pid 14452:tid 14452] [client 216.26.236.66:48629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lobibilisim.com"] [uri "/.git/HEAD"] [unique_id "aSUcGjvNHPJ6gGsWxZNfPgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:27:29 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.236.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.236.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:27:25.019652 2025] [security2:error] [pid 20789:tid 20789] [client 216.26.236.66:26479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.hakanbasboga.com"] [uri "/.git/HEAD"] [unique_id "aSUUDd4-iQMediBeaEMZfQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 220.134.39.181

🇨🇳 122.114.35.35

🇳🇬 102.91.123.220

🇺🇸 96.78.175.36

🇻🇪 74.123.48.199

🇳🇱 2a0f:ca80:b00b:ce63::5

🇺🇸 2600:1900:0:2102::801

🇦🇺 203.220.182.51

🇧🇪 198.235.24.214

🇧🇪 198.235.24.163

🇺🇸 195.184.76.68

🇧🇷 191.180.161.164

🇦🇷 181.168.158.125

🇧🇷 162.241.63.63

🇯🇵 152.32.146.235

🇩🇪 151.123.177.241

🇮🇩 103.217.146.46

🇫🇷 91.196.152.94

🇨🇳 61.53.4.55

🇳🇱 45.148.10.230