JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.238.250

216.26.238.250 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.238.250

Whois 216.26.238.250

IP Abuse Reports for 216.26.238.250:

This IP address has been reported a total of 23 times from 8 distinct sources. 216.26.238.250 was first reported on September 27th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-20 12:05:51 (2 months ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (88/60 min)'; Requests=88	Port Scan
🇩🇪 F242	2026-01-30 05:37:00 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:57:09 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-12-22 16:52:33 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.22 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.22 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-27 16:17:50 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.27 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 08:34:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:34:10.435383 2025] [security2:error] [pid 2488:tid 2488] [client 216.26.238.250:33695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.toody.com"] [uri "/.svn/wc.db"] [unique_id "aSa7ggBA0nA6-GdScMR1eQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:19:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:19:18.309060 2025] [security2:error] [pid 21572:tid 21572] [client 216.26.238.250:36517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.intermixxnet.independentmusicconference.com"] [uri "/.env"] [unique_id "aSZxth176mKGCz23EA_I7QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-26 03:14:21 (6 months ago)	Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ... show more Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:18:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:18:07.218895 2025] [security2:error] [pid 32190:tid 32190] [client 216.26.238.250:60791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegameforeverybody.computerian.net"] [uri "/.git/HEAD"] [unique_id "aSZVT46AjKkpGSdgXKfEbQAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:25:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:25:44.968764 2025] [security2:error] [pid 3003:tid 3003] [client 216.26.238.250:38513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.wplusw.com"] [uri "/.env"] [unique_id "aSUTqFfuf1zdFkMidv_wIgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:43:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:43:31.581740 2025] [security2:error] [pid 14485:tid 14485] [client 216.26.238.250:19105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.listerman.org"] [uri "/.git/HEAD"] [unique_id "aSP-k3w2_9XPP-N1QifWRgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:58:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:58:47.637348 2025] [security2:error] [pid 30181:tid 30181] [client 216.26.238.250:36395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sample.terrellfletcher.com"] [uri "/.git/HEAD"] [unique_id "aSPX9wfB6d-1TpBDfZYkwwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-19 23:47:09 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.19 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-13 21:50:54 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-08 20:26:34 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.08 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.08 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.200.39.156

🇸🇬 167.99.66.42

🇺🇸 150.107.38.133

🇲🇴 125.31.2.160

🇷🇴 94.156.152.50

🇨🇦 85.217.149.74

🇨🇦 85.217.149.25

🇨🇦 85.217.149.11

🇺🇸 68.183.146.114

🇮🇳 34.131.72.204

🇮🇷 5.237.101.143

🇺🇸 2a03:2880:11ff:5::

🇺🇸 173.252.87.130

🇫🇷 85.217.140.49

🇫🇷 85.217.140.10

🇫🇷 85.217.140.3

🇬🇧 81.19.219.252

🇳🇱 45.148.10.157

🇺🇸 45.79.207.110

🇧🇷 43.164.195.160