JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.226.68

216.26.226.68 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.226.68

Whois 216.26.226.68

IP Abuse Reports for 216.26.226.68:

This IP address has been reported a total of 49 times from 11 distinct sources. 216.26.226.68 was first reported on September 27th 2025, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 alferez	2026-07-29 09:39:22 (19 hours ago)	wp2shell bug exploit	Hacking Exploited Host Web App Attack
Anonymous	2026-07-29 07:00:00 (21 hours ago)	Apache probe; attempts=26; exact paths: /xmlrpc.php	Web App Attack
🇫🇷 Sklurk	2026-07-07 16:12:09 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-20 00:30:07 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2025-12-03 11:37:20 (7 months ago)	botnet	DDoS Attack
🇫🇮 Shaik Sai Meera	2025-11-27 10:20:11 (8 months ago)	IM360 WAF: Hidden file access	Brute-Force
🇺🇸 TPI-Abuse	2025-11-27 07:43:52 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 02:43:48.673403 2025] [security2:error] [pid 29064:tid 29064] [client 216.26.226.68:59277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.danproctor.com"] [uri "/.git/HEAD"] [unique_id "aSgBNP3DfYB44YuItg9qGgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 23:19:03 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 18:18:57.411614 2025] [security2:error] [pid 7495:tid 7503] [client 216.26.226.68:46985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ar.xavidominguez.com"] [uri "/.git/HEAD"] [unique_id "aSeK4T_yhW33HSmJKYnm_QAAAII"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:47:04 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:46:57.240958 2025] [security2:error] [pid 10792:tid 10792] [client 216.26.226.68:27555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ardath.net"] [uri "/.svn/wc.db"] [unique_id "aSVe8YQCiZMsLaHbPqKwCgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:25:02 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:24:54.378016 2025] [security2:error] [pid 5533:tid 5533] [client 216.26.226.68:52615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.crescentcitycafe.org"] [uri "/.git/HEAD"] [unique_id "aSVZxja7U6to8LDqJSDWKwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:00:18 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:00:03.131981 2025] [security2:error] [pid 1816809:tid 1816923] [client 216.26.226.68:52945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.wegelin.org"] [uri "/.git/HEAD"] [unique_id "aSVT846NxcAqrEXFy88xGwAAARM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:27:14 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:27:11.423397 2025] [security2:error] [pid 12363:tid 12363] [client 216.26.226.68:37607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.livingminimal.com"] [uri "/.svn/wc.db"] [unique_id "aSVMP3M6l3IFKJ7RSUu7vQAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:27:22 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:27:14.850661 2025] [security2:error] [pid 27817:tid 27817] [client 216.26.226.68:21263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lanistandifer.com"] [uri "/.env"] [unique_id "aSU-MoEUGLYwCKLyBsMAlgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:02:05 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:02:01.011388 2025] [security2:error] [pid 21679:tid 21679] [client 216.26.226.68:32321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ryszardwycisk.com"] [uri "/.env"] [unique_id "aSU4SZjqpi6lJxZfuNjYZQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:45:38 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.226.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:45:31.142573 2025] [security2:error] [pid 11765:tid 11765] [client 216.26.226.68:56479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.christinastoddard.com"] [uri "/.git/HEAD"] [unique_id "aSU0a18ZLeUM-Xybajj48QAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.124

🇺🇸 216.25.89.89

🇪🇨 177.53.213.108

🇳🇱 176.65.148.136

🇫🇷 91.231.89.45

🇩🇪 80.158.109.51

🇺🇸 69.12.80.254

🇺🇸 66.132.172.146

🇩🇪 47.91.90.160

🇳🇱 45.148.10.152

🇬🇧 35.203.211.227

🇯🇵 1.33.54.103

🇳🇱 193.176.31.229

🇬🇧 188.240.59.50

🇺🇸 185.180.141.34

🇨🇳 182.138.158.67

🇻🇪 154.40.142.173

🇲🇷 102.216.219.24

🇺🇸 91.230.168.3

🇫🇷 85.217.140.34