JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.225.133

216.26.225.133 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.225.133

Whois 216.26.225.133

IP Abuse Reports for 216.26.225.133:

This IP address has been reported a total of 27 times from 13 distinct sources. 216.26.225.133 was first reported on September 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-09-01 14:44:24 (1 day ago)	[14:44] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [14:44] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇺🇸 drewf.ink	2026-08-30 00:10:57 (4 days ago)	[00:10] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [00:10] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇺🇸 drewf.ink	2026-08-29 20:25:34 (4 days ago)	[20:25] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [20:25] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇩🇪 Goetz	2026-08-27 12:04:21 (6 days ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇫🇷 Sklurk	2026-08-03 03:32:43 (4 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-02 02:20:24 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-01 01:58:22 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-31 01:14:37 (1 month ago)	Web App Attack	Web App Attack
🇮🇹 VHosting	2025-12-24 00:50:11 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-27 19:14:59 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:14:54.801426 2025] [security2:error] [pid 28578:tid 28578] [client 216.26.225.133:24595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americanexportimport.com"] [uri "/.env"] [unique_id "aSijLl50UyjD-odoOvwXvwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 11:59:50 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:59:44.019075 2025] [security2:error] [pid 11174:tid 11174] [client 216.26.225.133:15675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.chrisdenem.com"] [uri "/.svn/wc.db"] [unique_id "aSbrsMFkIUGS47a7bt3egQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 07:25:48 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:25:43.556404 2025] [security2:error] [pid 3697898:tid 3697918] [client 216.26.225.133:33813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kerrfamilyassociation.com"] [uri "/.git/HEAD"] [unique_id "aSardxXsw-P_EAMOaarrmwAAAJI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:04:44 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:04:39.124999 2025] [security2:error] [pid 2450111:tid 2450111] [client 216.26.225.133:49045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.patrickodougherty.com"] [uri "/.svn/wc.db"] [unique_id "aSaYd8YjUCYnkQlq6UNnDQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:56:28 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:56:20.827568 2025] [security2:error] [pid 18827:tid 18967] [client 216.26.225.133:48073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "managementlaw.property-management-companies-chicago.com"] [uri "/.env"] [unique_id "aSZQNMTvREaKfhuVq1p1nQAAAYs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:20:34 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:20:31.520421 2025] [security2:error] [pid 14536:tid 14536] [client 216.26.225.133:23393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.alhashim.com"] [uri "/.env"] [unique_id "aSZHzzpBoLVQtb3jeNaDTwAAACo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.252

🇸🇬 162.158.163.165

🇨🇳 150.255.248.251

🇺🇸 74.125.182.89

🇺🇸 64.62.197.96

🇺🇸 64.62.156.24

🇺🇸 47.251.70.202

🇳🇱 45.148.10.247

🇿🇼 197.221.232.44

🇷🇺 178.140.129.139

🇺🇸 162.216.150.189

🇫🇮 147.185.133.168

🇨🇳 120.84.194.161

🇵🇰 103.134.0.250

🇮🇩 103.29.185.162

🇺🇸 91.230.168.160

🇳🇱 89.21.67.165

🇲🇾 47.250.53.113

🇺🇸 45.156.129.95

🇺🇸 44.201.218.27