JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.240.96

216.26.240.96 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.240.96

Whois 216.26.240.96

IP Abuse Reports for 216.26.240.96:

This IP address has been reported a total of 12 times from 6 distinct sources. 216.26.240.96 was first reported on October 30th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-09 21:15:35 (2 hours ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇮 inlink.ltd	2026-06-06 19:13:51 (3 days ago)	dot file probe	Web App Attack
🇧🇷 Halux	2026-06-06 10:29:59 (3 days ago)	216.26.240.96 Probing protected path or service	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-11 07:06:01 (4 weeks ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:24:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:24:32.901377 2025] [security2:error] [pid 20461:tid 20461] [client 216.26.240.96:56155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.general.graphics"] [uri "/.svn/wc.db"] [unique_id "aSVLoDUWcXtPM0-a-IoVbwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:47:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:46:57.548786 2025] [security2:error] [pid 15749:tid 15749] [client 216.26.240.96:52993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.paintscapeabroad.com"] [uri "/.git/HEAD"] [unique_id "aSU0wb2736jiv-ho7N9gvwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:17:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:17:44.138097 2025] [security2:error] [pid 21390:tid 21390] [client 216.26.240.96:25549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.arcticwarriors.org"] [uri "/.git/HEAD"] [unique_id "aSUt6Erlyf1QKMzrSkfN9QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:54:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:54:46.733489 2025] [security2:error] [pid 3010:tid 3010] [client 216.26.240.96:18335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kirklandplumbing.ca"] [uri "/.git/HEAD"] [unique_id "aSUohjUIvSWyBPvHubo7ogAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:10:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:10:00.486239 2025] [security2:error] [pid 27110:tid 27110] [client 216.26.240.96:42191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.flatchestedmama.com"] [uri "/.git/HEAD"] [unique_id "aSUeCCHpwRUI7wXUENPNqgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:11:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:11:12.723967 2025] [security2:error] [pid 10696:tid 10696] [client 216.26.240.96:41767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tekbit.com"] [uri "/.git/HEAD"] [unique_id "aSUQQIb77ZsDjU6LDTtX-wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:46:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.240.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:46:38.028964 2025] [security2:error] [pid 11425:tid 11425] [client 216.26.240.96:42689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.angelpc.net"] [uri "/.git/HEAD"] [unique_id "aSUKfjegKk7YiSdF3Td5lQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-30 14:04:32 (7 months ago)	WordPress Brute Force	Brute-Force

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 152.42.226.162

🇮🇳 125.20.246.106

🇱🇹 81.30.98.49

🇺🇸 43.153.96.187

🇨🇳 182.242.168.176

🇮🇩 163.227.52.50

🇺🇸 138.99.39.45

🇺🇸 96.225.175.237

🇺🇸 8.230.118.58

🇧🇷 189.50.142.78

🇻🇳 103.56.161.126

🇺🇸 52.167.144.193

🇲🇽 189.240.44.9

🇩🇪 167.172.187.11

🇺🇸 160.153.187.97

🇯🇵 152.32.201.247

🇭🇰 150.5.131.119

🇨🇭 104.244.74.201

🇭🇰 82.47.32.185

🇷🇺 81.211.72.167