JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.228.214

216.26.228.214 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.228.214

Whois 216.26.228.214

IP Abuse Reports for 216.26.228.214:

This IP address has been reported a total of 28 times from 14 distinct sources. 216.26.228.214 was first reported on September 4th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Peter Racine	2026-07-08 19:48:00 (1 day ago)	Credential stuffing - exchange accounts	Brute-Force
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇳🇱 i-turnradio.nl	2026-01-28 13:28:11 (5 months ago)	2026-01-28 14:28:10 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
Anonymous	2025-11-30 13:06:43 (7 months ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:05:29 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:05:21.267448 2025] [security2:error] [pid 16709:tid 16709] [client 216.26.228.214:33341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.highspringtradingpost.com"] [uri "/.env"] [unique_id "aSaKked5xVB4gq667Rz6MAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:57:29 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:57:06.519499 2025] [security2:error] [pid 10061:tid 10061] [client 216.26.228.214:14949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mykelmilur.com"] [uri "/.svn/wc.db"] [unique_id "aSU3IlQ2w8Xpiy9ML5QDswAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:51:52 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:51:45.002794 2025] [security2:error] [pid 13895:tid 13911] [client 216.26.228.214:44443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nicolelmartin.com"] [uri "/.svn/wc.db"] [unique_id "aSUn0cqATJ-N2rrGOLZxUwAAAU4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:19:07 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:18:58.706295 2025] [security2:error] [pid 15101:tid 15117] [client 216.26.228.214:41901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.alabamacentralrailroad.com"] [uri "/.svn/wc.db"] [unique_id "aSUgIqNKS2jdjfTVKRdfGwAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:49:08 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:49:01.277885 2025] [security2:error] [pid 26856:tid 26856] [client 216.26.228.214:52617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ericeschenbach.com"] [uri "/.git/HEAD"] [unique_id "aSUZHbWiqZviQDUQhHI8TAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:38:18 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:38:13.680612 2025] [security2:error] [pid 1647140:tid 1647178] [client 216.26.228.214:38143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mentzlaw.com"] [uri "/.git/HEAD"] [unique_id "aSUIhcWdNO_bFaD03ZYOAwAAAMA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:18:48 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:18:39.535208 2025] [security2:error] [pid 12972:tid 12972] [client 216.26.228.214:16327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.laughingthunder.com"] [uri "/.svn/wc.db"] [unique_id "aSQi75wRF4i8zaVQyQiGFgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:01:44 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:01:35.135301 2025] [security2:error] [pid 24276:tid 24276] [client 216.26.228.214:34941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.fabandco.com"] [uri "/.git/HEAD"] [unique_id "aSQe74Fv4aV-UQ5nyItE5AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:43:40 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:43:32.739873 2025] [security2:error] [pid 20274:tid 20274] [client 216.26.228.214:15979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.perlcreativedesign.com"] [uri "/.git/HEAD"] [unique_id "aSQatBs9_f_bfWlsn1k2lQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-11-19 07:53:09 (7 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-11-18 17:21:39 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 111.9.22.102

🇬🇧 217.154.38.181

🇺🇸 216.119.203.33

🇨🇦 158.69.197.98

🇧🇷 138.255.144.82

🇨🇳 113.57.187.147

🇳🇱 91.92.42.195

🇲🇰 79.125.162.32

🇨🇦 72.251.5.146

🇧🇷 177.156.173.102

🇮🇱 172.252.137.28

🇫🇮 147.185.133.222

🇺🇸 64.252.122.216

🇰🇷 211.223.41.90

🇮🇩 202.155.157.131

🇵🇪 179.6.101.45

🇨🇳 120.26.243.94

🇸🇬 110.238.111.224

🇩🇪 69.5.169.191

🇳🇱 45.148.10.157