JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.239.250

216.26.239.250 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 16%: ?

16%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.239.250

Whois 216.26.239.250

IP Abuse Reports for 216.26.239.250:

This IP address has been reported a total of 10 times from 7 distinct sources. 216.26.239.250 was first reported on October 28th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-01 00:40:28 (1 day ago)	Web App Attack	Web App Attack
🇩🇪 Trueforce Threat Report	2026-06-25 05:55:16 (1 month ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇩🇪 raph	2026-06-20 08:55:57 (1 month ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-26 03:15:57 (8 months ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:15:14 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.239.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.239.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:15:08.822763 2025] [security2:error] [pid 3296143:tid 3296160] [client 216.26.239.250:35025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.pershia.net"] [uri "/.git/HEAD"] [unique_id "aSZGjH8uvS_75eRGAWOI5wAAAY8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:33:07 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.239.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.239.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:32:59.084084 2025] [security2:error] [pid 17999:tid 17999] [client 216.26.239.250:39479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.blacksheepoffroad.com"] [uri "/.env"] [unique_id "aSQYO5L1WeHDDHt5iEYS6AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:14:20 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.239.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.239.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:14:13.695042 2025] [security2:error] [pid 31463:tid 31463] [client 216.26.239.250:22563] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.momokuwait.gulftelecom.com"] [uri "/.env"] [unique_id "aSQT1XVrgrQxp_RpD4pJDgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-10 00:56:49 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 216.26.239.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 216.26.239.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 19:56:43.873233 2025] [security2:error] [pid 12982:tid 12982] [client 216.26.239.250:18465] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nlc-calumet.org.dhsgrad.net\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nlc-calumet.org.dhsgrad.net"] [uri "/s3cmd.ini"] [unique_id "aRE4SzXUhzItBZrUjkmxegAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-01 23:32:00 (9 months ago)	Unauthorized connection attempt	Brute-Force
🇮🇩 BPS-StatisticsIndonesia	2025-10-28 12:23:03 (9 months ago)	WP Login Scan Activities	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac1:76a0:460::5e:67

🇳🇱 213.176.26.133

🇫🇷 207.180.200.152

🇺🇸 207.90.244.27

🇳🇱 192.42.116.12

🇺🇸 172.120.119.163

🇺🇸 162.217.100.41

🇺🇸 162.216.150.250

🇺🇸 161.123.101.74

🇨🇳 118.196.119.108

🇺🇸 103.149.130.217

🇮🇳 103.44.14.22

🇩🇪 69.5.169.179

🇺🇸 172.203.253.212

🇮🇳 172.83.83.194

🇳🇱 107.189.27.179

🇿🇦 105.225.30.41

🇻🇳 103.152.165.164

🇺🇸 100.28.153.226

🇺🇸 98.80.4.40