JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.224.136

216.26.224.136 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.224.136

Whois 216.26.224.136

IP Abuse Reports for 216.26.224.136:

This IP address has been reported a total of 32 times from 18 distinct sources. 216.26.224.136 was first reported on September 27th 2025, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Marc	2026-08-31 18:28:28 (20 hours ago)	216.26.224.136 - - [31/Aug/2026:20:25:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5977 "" "Mozilla/5.0 ... show more 216.26.224.136 - - [31/Aug/2026:20:25:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5977 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 216.26.224.136 - - [31/Aug/2026:20:26:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5978 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0" 216.26.224.136 - - [31/Aug/2026:20:28:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5979 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇬🇷 setupgr	2026-08-31 08:17:28 (1 day ago)	(wplogin_block) Blocked WP-Login Access Attempt 216.26.224.136 (US/United States/Virginia/Ashburn/-/ ... show more (wplogin_block) Blocked WP-Login Access Attempt 216.26.224.136 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.26.224.136 - - [31/Aug/2026:11:17:11 +0300] "POST /wp-login.php HTTP/1.1" 302 - "https://cpanagiotou.gr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" show less	Port Scan
🇫🇷 ELYAZ	2026-08-31 03:29:28 (1 day ago)	(wordpress) Failed wordpress login from 216.26.224.136 (US/United States/-): (CF_ENABLE)	Brute-Force
🇮🇩 securejdprop	2026-08-29 18:46:51 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 68). show less	Hacking Web App Attack
Anonymous	2026-08-29 05:58:17 (3 days ago)	Network service scanning detected by FortiGate; source quarantined.	Port Scan
🇺🇸 TRoden	2026-02-09 19:02:51 (6 months ago)	Geo Block Plugin: Escalation flag(s): rce_attempt	Hacking
🇪🇸 10dencehispahard SL	2026-01-16 08:12:07 (7 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇮🇹 VHosting	2025-12-24 03:10:36 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-08 15:57:33 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.224.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.224.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 10:57:24.660540 2025] [security2:error] [pid 25562:tid 25562] [client 216.26.224.136:54909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "finishlineenterprisesllc.com"] [uri "/.env"] [unique_id "aTb1ZCEJiIH-VLKpXzusYgAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-07 23:00:48 (8 months ago)	Auto-ban: >3000 req/min op 2025-12-07	Hacking Web App Attack SSH
🇳🇱 jjnxpct	2025-12-07 04:54:32 (8 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.aws/credentials (Rule ID: 930130) - Restricted File Access Attempt show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:42:38 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.224.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.224.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:42:32.316772 2025] [security2:error] [pid 1404:tid 1477] [client 216.26.224.136:18343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andyboynton.com"] [uri "/.env"] [unique_id "aTK3GHg5Q5RkA8AsRzxGcAAAAJY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 07:57:03 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.224.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.224.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 02:56:53.834725 2025] [security2:error] [pid 22600:tid 22600] [client 216.26.224.136:47467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seariversummit.com"] [uri "/.git/HEAD"] [unique_id "aTKQRcn6AGrkmLPv9kHL-wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-04 03:21:42 (8 months ago)	2025-12-04T05:21:42.456464+02:00 zanati wp(www.sahpa.co.za)[382755]: Blocked authentication attempt ... show more 2025-12-04T05:21:42.456464+02:00 zanati wp(www.sahpa.co.za)[382755]: Blocked authentication attempt for [email protected] from 216.26.224.136 ... show less	Web App Attack
🇪🇸 10dencehispahard SL	2025-12-03 07:36:13 (8 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 158.23.18.78

🇨🇳 121.228.43.8

🇧🇬 95.87.248.223

🇮🇹 91.80.164.184

🇺🇸 69.48.204.84

🇮🇳 66.116.224.129

🇳🇱 45.148.10.36

🇳🇱 45.148.10.26

🇬🇧 195.96.139.58

🇬🇧 193.163.125.108

🇳🇱 89.21.67.162

🇳🇱 45.148.10.31

🇳🇱 45.148.10.30

🇳🇱 45.148.10.29

🇺🇸 45.33.42.25

🇺🇸 40.124.178.208

🇺🇸 172.212.167.169

🇺🇸 158.94.187.27

🇺🇸 154.16.116.152

🇰🇷 119.207.83.10