JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.238.48

216.26.238.48 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 12%: ?

12%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.238.48

Whois 216.26.238.48

IP Abuse Reports for 216.26.238.48:

This IP address has been reported a total of 20 times from 10 distinct sources. 216.26.238.48 was first reported on May 25th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-08 00:59:11 (3 days ago)	Web App Attack	Web App Attack
🇺🇸 mnsf	2026-06-01 14:05:39 (1 month ago)	Scanning/Probing (34)	Brute-Force Web App Attack
🇺🇸 mnsf	2026-05-28 22:05:28 (1 month ago)	Scanning/Probing (34)	Brute-Force Web App Attack
🇺🇸 mnsf	2026-05-25 10:05:32 (1 month ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇷🇴 Fn4ticHz	2026-05-08 22:59:12 (2 months ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇺🇸 TPI-Abuse	2025-11-24 07:18:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:18:50.412003 2025] [security2:error] [pid 21709:tid 21709] [client 216.26.238.48:43089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.shelbynash.com"] [uri "/.env"] [unique_id "aSQG2hb1g6JwrQb4u2JlzgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:58:25 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:58:20.382418 2025] [security2:error] [pid 24677:tid 24677] [client 216.26.238.48:50281] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amywoodruff.com"] [uri "/.svn/wc.db"] [unique_id "aSPz_J_Iu5vJ92Y-pv4JowAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:39:56 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.238.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.238.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:39:49.625781 2025] [security2:error] [pid 14603:tid 14603] [client 216.26.238.48:32031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lorendata.net"] [uri "/.git/HEAD"] [unique_id "aSPhlYZQ6frl9mzLWhWS9wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-29 09:33:13 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-15 09:53:05 (8 months ago)	GlobalProtect login attempts with user nyokap.	VPN IP Brute-Force
🇺🇸 fbarela	2025-10-12 11:00:31 (8 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-10-05 18:47:49 (9 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.05 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-04 08:02:58 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.04 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-02 23:23:25 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.02 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.02 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-01 08:18:19 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.189.144.111

🇩🇪 193.124.20.235

🇮🇳 182.19.35.57

🇺🇸 152.32.235.36

🇫🇮 147.185.133.139

🇨🇳 106.37.72.234

🇺🇸 66.132.186.159

🇺🇸 66.132.186.130

🇺🇸 40.124.173.185

🇨🇦 209.151.129.188

🇮🇪 207.254.29.22

🇩🇪 193.124.20.244

🇹🇭 118.194.251.145

🇺🇸 108.165.123.121

🇹🇷 94.154.43.36

🇬🇧 82.20.104.216

🇺🇸 66.132.172.125

🇺🇸 66.132.172.111

🇨🇳 60.221.136.46

🇳🇱 45.198.224.5