AbuseIPDB » 216.26.239.80
216.26.239.80
This IP was reported 9 times. Confidence of
Abuse
is 27% : ?
ISP
3xK Tech GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS200373
Domain Name
3xktech.cloud
Country
🇨🇦
Canada
City
Toronto, Ontario
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 216.26.239.80 :
This IP address has been reported a total of
9
times from
9 distinct
sources.
216.26.239.80 was first reported on
November 2nd 2025 , and the most recent report was
20 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-06-27 19:08:17
(20 hours ago)
216.26.239.80 - - [27/Jun/2026:21:08:13 +0200] "GET /.git/ HTTP/1.1" 403 441 "-" "Mozilla/5.0 (Windo ...
show more
216.26.239.80 - - [27/Jun/2026:21:08:13 +0200] "GET /.git/ HTTP/1.1" 403 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
216.26.239.80 - - [27/Jun/2026:21:08:14 +0200] "GET /.git/COMMIT_EDITMSG HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
216.26.239.80 - - [27/Jun/2026:21:08:14 +0200] "GET /.git/hooks/post-commit.sample HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
216.26.239.80 - - [27/Jun/2026:21:08:15 +0200] "GET /.git/objects/info/packs HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
216.26.239.80 - - [27/Jun/2026:21:08:15 +0200] "GET /.git/hooks/post-receive.sample HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537
...
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-06-27 14:42:41
(1 day ago)
1.781 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇨🇭
Origon
2026-06-08 13:15:57
(2 weeks ago)
http-probing - IP: 216.26.239.80 - time="2026-06-08T15:15:56+02:00" level=info msg="(555f66b4f6a745 ...
show more
http-probing - IP: 216.26.239.80 - time="2026-06-08T15:15:56+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 216.26.239.80 (BR/200373) : 4h ban on Ip 216.26.239.80" module=db
show less
Web App Attack
🇺🇸
oncord
2026-05-29 15:43:18
(4 weeks ago)
Form spam
Web Spam
🇩🇪
artifice
2026-05-23 16:25:23
(1 month ago)
WordPress attack activity: web-application attack.
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-26 10:29:24
(5 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇱🇻
garmtech.com
2026-01-22 08:21:57
(5 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇺🇸
TPI-Abuse
2025-11-25 07:19:51
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:19:45.421127 2025] [security2:error] [pid 30378:tid 30378] [client 216.26.239.80:26493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.creertest.com"] [uri "/.svn/wc.db"] [unique_id "aSVYkYbFo8skPLeh6fX-HQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-02 14:58:14
(7 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 07:17:49
Port Scan
Brute-Force
Exploited Host
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: