JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.238.16

216.26.238.16 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 12%: ?

12%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.238.16

Whois 216.26.238.16

IP Abuse Reports for 216.26.238.16:

This IP address has been reported a total of 17 times from 9 distinct sources. 216.26.238.16 was first reported on September 27th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-29 02:14:03 (4 weeks ago)	Web App Attack	Web App Attack
🇬🇧 Oakley	2026-07-15 18:28:10 (1 month ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇺🇸 bp-cyber	2026-07-11 03:13:46 (1 month ago)	Malicious login attempts to Microsoft account related to attempted distributed brute force attempt.	Hacking Brute-Force Exploited Host Web App Attack
🇫🇷 Sklurk	2026-07-09 00:42:38 (1 month ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-05-17 05:04:47 (3 months ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-05-13 22:52:43 (3 months ago)	RDWeb scan	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:51:53 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:51:46.316089 2025] [security2:error] [pid 30144:tid 30144] [client 216.26.238.16:12523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "box903.com"] [uri "/.env"] [unique_id "aSQqsnFzJdIs4NfamOL86QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:08:41 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:08:36.069658 2025] [security2:error] [pid 25040:tid 25040] [client 216.26.238.16:38479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.iktonline.org"] [uri "/.svn/wc.db"] [unique_id "aSPoVA6FjMq_p8YBA7hJxQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 02:25:38 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:25:35.164543 2025] [security2:error] [pid 3779003:tid 3779109] [client 216.26.238.16:53809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.aeaus.com"] [uri "/.git/HEAD"] [unique_id "aSPCH1xnCH5k-qdkYNzmSQAAAgI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-15 16:41:08 (10 months ago)	unauthorized access attempts	Brute-Force
🇺🇸 fbarela	2025-10-12 08:01:35 (10 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-10-06 16:32:45 (10 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-03 02:07:27 (10 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.03 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-01 21:22:46 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-30 11:44:21 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:1038:1000:bbdd:3a80:3061:318d

🇱🇹 213.176.26.19

🇰🇿 185.233.3.95

🇨🇦 67.213.82.18

🇫🇷 185.177.72.205

🇧🇩 103.130.119.62

🇬🇧 62.60.130.253

🇨🇳 39.81.10.219

🇬🇹 190.106.221.168

🇨🇳 118.145.238.115

🇬🇧 89.37.172.157

🇺🇸 66.132.172.120

🇺🇸 54.91.228.244

🇨🇦 20.104.18.15

🇱🇹 213.176.26.191

🇺🇸 172.104.11.4

🇺🇸 170.106.160.90

🇩🇪 168.119.14.54

🇩🇪 159.89.12.166

🇯🇵 118.194.236.126