216.26.226.28
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- 3xK Tech GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS200373
- Domain Name
- 3xktech.cloud
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
41 from
27 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇴 jad-abuse |
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: source_backup. Observed by 1 sensor(s); 1 hits.
|
Bad Web Bot Web App Attack | |
| 🇩🇪 paissangroup |
Multiple WAF Violations
|
Web App Attack | |
| Anonymous |
[honeypot-scan] 2026-10-14 15:15:48, Client: 216.26.226.28, Protocol: 6 (TCP), Service: HTTP, Activity: bait-path scan (.env/.git probing)
|
Web App Attack | |
| 🇺🇸 boombies |
etaylor
|
Brute-Force | |
| 🇺🇸 drewf.ink |
[15:18] Attempted HTTPS GlobalProtect login with credentials adminajackson:ad*********on
|
Web App Attack | |
| Anonymous |
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force Web App Attack Hacking | |
| 🇫🇷 dynamix |
Multiple WAF Violations
|
Web App Attack | |
| Anonymous |
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Sep 6, 03:14 UTC. Origin: United States, Ashburn.
|
Hacking Bad Web Bot Web App Attack | |
| 🇩🇪 Vegascosmetics |
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wp-login\.php (Match: /wp-login.php)
|
Hacking Exploited Host Web App Attack | |
| 🇺🇸 drewf.ink |
[12:14] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
|
Web App Attack | |
| 🇸🇪 OnTheEdge |
Password spraying. Multiple unauthorized login attempts
|
Hacking Web App Attack | |
| 🇺🇸 craudiovizai |
Automated honeypot detection. honeypot against a Next.js application. Paths: /xmlrpc.php. Blocked at the edge.
|
Web App Attack Bad Web Bot | |
| 🇬🇷 setupgr |
|
Port Scan | |
| 🇮🇹 Progetto1 |
Website Scanning / Scraping
|
Bad Web Bot Exploited Host Web App Attack | |
| 🇫🇷 ELYAZ |
(wordpress) Failed wordpress login from 216.26.226.28 (US/United States/-): (CF_ENABLE)
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown