JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.225.153

216.26.225.153 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.225.153

Whois 216.26.225.153

IP Abuse Reports for 216.26.225.153:

This IP address has been reported a total of 28 times from 12 distinct sources. 216.26.225.153 was first reported on September 28th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oncord	2026-03-07 13:27:26 (2 months ago)	Form spam	Web Spam
🇳🇱 pixelXp	2026-02-22 10:01:50 (3 months ago)	Score:126.91, Reason:10 (Web Spam), Via: www.cms-hulp.nl/contactgegevens.html, Message: attract high ... show more Score:126.91, Reason:10 (Web Spam), Via: www.cms-hulp.nl/contactgegevens.html, Message: attract high-intent keyword and location-targeted traffic with our ai-driven service far more affordable than paid advertising connect with us today show less	Web Spam
🇦🇺 oncord	2026-02-07 21:19:54 (3 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-04 08:16:08 (4 months ago)	Form spam	Web Spam
🇺🇸 oncord	2026-01-27 06:18:53 (4 months ago)	Form spam	Web Spam
Anonymous	2025-12-13 01:59:20 (5 months ago)	botnet	DDoS Attack
🇳🇱 jjnxpct	2025-11-26 04:56:37 (6 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.svn/wc.db (Rule ID: 920440) - URL file extension is restricted by policy show less	Hacking SQL Injection Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-25 23:01:51 (6 months ago)	Auto-ban: >3000 req/min op 2025-11-25	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 07:18:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:18:19.575879 2025] [security2:error] [pid 29364:tid 29364] [client 216.26.225.153:32097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ronniescedarinn.com"] [uri "/.env"] [unique_id "aSVYO6X3OOv8HUuPNevxbwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:15:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:15:31.821437 2025] [security2:error] [pid 15710:tid 15710] [client 216.26.225.153:42139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "delta-pizza.com"] [uri "/.svn/wc.db"] [unique_id "aSUfU2BJf07_eGGD7UU7HQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:27:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:27:52.042533 2025] [security2:error] [pid 25024:tid 25024] [client 216.26.225.153:35811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blacktieokc.com"] [uri "/.svn/wc.db"] [unique_id "aSQlGDGc7MHhEKdBRkQofgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:24:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:24:47.590370 2025] [security2:error] [pid 3469285:tid 3469285] [client 216.26.225.153:50631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.duraluxetile.ipostsocialmedia.com"] [uri "/.svn/wc.db"] [unique_id "aSQIP6cwE2TbhQ_bo_OGXAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:19:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:19:45.417482 2025] [security2:error] [pid 9879:tid 9879] [client 216.26.225.153:46679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.geriking.com"] [uri "/.env"] [unique_id "aSPq8SDjC_Z_WVSx8IN1FgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:10:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.225.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:10:44.008348 2025] [security2:error] [pid 15356:tid 15356] [client 216.26.225.153:19275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.saramics.net"] [uri "/.git/HEAD"] [unique_id "aSPaxJW_Ql3paPFOjN8lgQAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-11-19 07:50:22 (6 months ago)	WP probing for vulnerabilities	Hacking Exploited Host

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.139

🇹🇼 198.235.24.113

🇬🇧 194.50.235.157

🇺🇸 107.141.138.44

🇮🇳 103.206.97.191

🇰🇭 58.97.230.84

🇹🇷 31.57.77.10

🇬🇧 31.14.254.31

🇺🇸 2602:80d:1008::96

🇺🇸 209.222.101.194

🇺🇸 207.90.244.12

🇧🇷 205.210.31.254

🇧🇪 198.235.24.180

🇳🇱 192.42.116.16

🇮🇳 183.82.120.1

🇧🇷 177.44.97.39

🇨🇳 116.179.32.82

🇫🇷 109.205.8.91

🇮🇳 106.214.8.107

🇳🇱 45.198.224.22