JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.251.215

216.26.251.215 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.251.215

Whois 216.26.251.215

IP Abuse Reports for 216.26.251.215:

This IP address has been reported a total of 22 times from 9 distinct sources. 216.26.251.215 was first reported on October 21st 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-06-24 11:07:27 (3 days ago)	Brute force	Brute-Force
🇨🇳 ThreatBook.io	2026-05-07 01:12:03 (1 month ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.251.215 2026-0 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.251.215 2026-05-06 01:35:31 /config/DataSetConfig%23.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-18 00:26:07 (2 months ago)	ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/216.26.251.215 2026 ... show more ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/216.26.251.215 2026-04-17 15:23:32 /api/swagger.json 2026-04-17 15:23:33 /v3/api-docs 2026-04-17 15:23:31 /v2/api-docs 2026-04-17 15:23:31 /swagger/v1/swagger.json 2026-04-17 15:23:30 /prod-api/v2/api-docs 2026-04-17 15:23:32 /swagger/docs/v1 show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-07 01:19:45 (3 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.251.215 2026-03 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.251.215 2026-03-06 12:16:57 /?(%27\u0023context[\%27xwork.MethodAccessor.denyMethodExecution\%27]\u003dfalse%27)(bla)(bla)&(%27\u0023_memberAccess.excludeProperties\[email protected]@EMPTY_SET%27)(kxlzx)(kxlzx)&(%27\u0023_memberAccess.allowStaticMethodAccess\u003dtrue%27)(bla)(bla)&(%27\u0023mycmd\u003d\%27netstat%20-an\%27%27)(bla)(bla)&(%27\u0023myret\[email protected]@getRuntime().exec(\u0023mycmd)%27)(bla)(bla)&(A)((%27\u0023mydat\u003dnew\40java.io.DataInputStream(\u0023myret.getInputStream())%27)(bla))&(B)((%27\u0023myres\u003dnew\40byte[51020]%27)(bla))&(C)((%27\u0023mydat.readFully(\u0023myres)%27)(bla))&(D)((%27\u0023mystr\u003dnew\40java.lang.String(\u0023myres)%27)(bla))&(%27\u0023myout\[email protected]@getResponse()%27)(bla)(bla)&(E)((%27\u0023myout.getWriter().println(\u0023mystr)%27)(bla)) 2026-03-06 12:16:53 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-02-14 23:59:41 (4 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.251.215 2026-02 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.251.215 2026-02-14 10:57:38 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇨🇳 ThreatBook.io	2026-01-30 01:56:51 (4 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.251.215 2026-01 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.251.215 2026-01-29 02:49:54 /config/DataSetConfig%23.xml show less	Web App Attack
Anonymous	2026-01-29 09:20:08 (4 months ago)	wordpress-trap	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-26 10:43:18 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-01-10 01:33:48 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.251.215 2026-01 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.26.251.215 2026-01-09 07:56:53 /druid/index.html show less	Web App Attack
Anonymous	2026-01-05 20:28:25 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-28 02:11:32 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.251.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.251.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 21:11:29.083123 2025] [security2:error] [pid 803200:tid 803272] [client 216.26.251.215:56549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "broadmoordermatology.com"] [uri "/.svn/wc.db"] [unique_id "aVCR0Y7XgMwBF-4q4mXt8wAAAcc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 01:52:43 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.251.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.251.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 20:52:36.474534 2025] [security2:error] [pid 29979:tid 29979] [client 216.26.251.215:37861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barnrods.com"] [uri "/.git/HEAD"] [unique_id "aVCNZAxw7vNJhJly4RdDvwAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2025-12-27 22:44:28 (5 months ago)	web exploits	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 21:59:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.251.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.251.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 16:59:29.179291 2025] [security2:error] [pid 23546:tid 23546] [client 216.26.251.215:35997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elitehomesfl.com"] [uri "/.svn/wc.db"] [unique_id "aVBWwYI5yHQMTvaRl4n89wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.255.223.89

🇻🇳 203.210.169.190

🇺🇸 148.72.144.211

🇨🇳 139.170.72.182

🇬🇧 77.72.5.164

🇦🇹 68.210.200.55

🇫🇷 51.68.226.87

🇺🇸 44.210.63.16

🇷🇺 5.3.154.1

🇨🇳 182.90.248.108

🇳🇱 158.94.211.246

🇸🇦 151.255.42.4

🇩🇪 69.5.169.238

🇬🇧 204.217.245.120

🇨🇦 199.58.83.10

🇩🇪 185.242.3.195

🇺🇸 44.238.11.182

🇺🇸 44.90.124.143

🇧🇷 24.152.97.3

🇩🇪 23.251.49.228