JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.240.222

216.26.240.222 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 52%: ?

52%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.240.222

Whois 216.26.240.222

IP Abuse Reports for 216.26.240.222:

This IP address has been reported a total of 16 times from 12 distinct sources. 216.26.240.222 was first reported on November 25th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-07-06 21:24:02 (1 hour ago)	Wordfence waf block on taussigtravel	Web App Attack
🇩🇪 FeG Deutschland	2026-07-06 05:34:13 (17 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-07-06 04:20:11 (18 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇨🇭 4server	2026-07-06 03:40:48 (19 hours ago)	[MonJul0605:40:41.5472022026][security2:error][pid1707806:tid1708409][client216.26.240.222:0]ModSecu ... show more [MonJul0605:40:41.5472022026][security2:error][pid1707806:tid1708409][client216.26.240.222:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"aeapcl.ch.81-17-25-250.cpanel.site\"][uri\"/.idea/workspace.xml\"][unique_id\"aksjuWi4-txtvpCQEFtwAAAAAdE\"] show less	Hacking Web App Attack
🇩🇪 iNetWorker	2026-07-05 17:53:53 (1 day ago)	trolling for resource vulnerabilities	Web App Attack
🇩🇪 4server	2026-07-05 15:24:45 (1 day ago)	[SunJul0517:24:43.4025492026][security2:error][pid3008652:tid3008718][client216.26.240.222:0]ModSecu ... show more [SunJul0517:24:43.4025492026][security2:error][pid3008652:tid3008718][client216.26.240.222:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"essesolution.ch.136-243-54-122.cpanel.site\"][uri\"/www/.env\"][unique_id\"akp3O2kvDs5urq5D230WNAAAAFI\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-07-02 17:49:35 (4 days ago)	[ThuJul0219:49:30.5188892026][security2:error][pid2148093:tid2148603][client216.26.240.222:0]ModSecu ... show more [ThuJul0219:49:30.5188892026][security2:error][pid2148093:tid2148603][client216.26.240.222:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"salonesamire.ch\"][uri\"/wp-login.php\"][unique_id\"akakqlcIuF0Lr3RaOgowUAAAAIc\"]\,referer:https://salonesamire.ch/wp-login.php show less	Hacking Web App Attack
🇩🇪 georgengelmann	2026-06-30 10:33:40 (6 days ago)	Failed login attempt for happy	Brute-Force Web App Attack
🇧🇪 Saec	2026-06-28 19:00:14 (1 week ago)	Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.ovh)	Port Scan Web App Attack
🇳🇱 i-turnradio.nl	2026-06-24 05:29:08 (1 week ago)	2026-06-24 @ 07:29:07 (CET) ~ Blocked for trying to access: /s3cmd.ini	Web App Attack
🇩🇪 LRob	2026-02-13 16:51:37 (4 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-01-18 11:50:04 (5 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-27 19:27:01 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.240.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.240.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:26:54.097296 2025] [security2:error] [pid 25608:tid 25608] [client 216.26.240.222:50035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ashleycroft.com"] [uri "/.svn/wc.db"] [unique_id "aSil_lP0-CIPcP7t3GP6sAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-11-26 20:30:34 (7 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.26.240.222 (BR/Brazil/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.26.240.222 (BR/Brazil/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:10:47 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.240.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.240.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:10:43.510545 2025] [security2:error] [pid 6357:tid 6357] [client 216.26.240.222:45089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apsni.net"] [uri "/.env"] [unique_id "aSZvsw9bWghZ4RV6M4iLPQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 94.243.10.205

🇩🇪 213.209.159.226

🇪🇸 213.201.70.60

🇺🇸 172.245.102.84

🇻🇳 125.212.244.35

🇺🇸 69.164.217.74

🇺🇸 45.156.129.71

🇺🇸 45.79.152.14

🇳🇱 31.14.32.4

🇸🇬 148.66.142.9

🇸🇪 142.251.142.226

🇨🇳 117.50.70.169

🇩🇪 109.91.4.177

🇧🇩 103.26.136.173

🇺🇸 81.30.98.66

🇮🇳 59.179.31.237

🇺🇸 107.178.7.126

🇺🇸 103.143.239.167

🇺🇸 96.126.106.177

🇬🇧 81.19.219.222