JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.228.220

216.26.228.220

Activity Trending Down

39 reports found in our database

16% ▼ ▼ ▼ Caution

Abuse confidence score ?

ISP

3xK Tech GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS200373

Domain Name

3xktech.cloud

Country

🇺🇸 United States of America

City

Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 216.26.228.220:

This IP address has been reported a total of 39 times from 18 distinct sources. 216.26.228.220 was first reported on September 26th 2025, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: France with 4 reports; Sweden with 1 report; United States of America with 1 report. The most common categories in these recent reports were: Web App Attack 4 times; Hacking 1 time; Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 shab	2026-09-03 11:06:14 (1 week ago)	Suspicious VPN activity	Brute-Force
🇺🇸 LSPCCU	2026-08-24 19:04:02 (3 weeks ago)	TSEC Honeypot Network report. Threat score: 63/100. Categories: Hacking. Honeypot: h0neytr4p, herald ... show more TSEC Honeypot Network report. Threat score: 63/100. Categories: Hacking. Honeypot: h0neytr4p, heralding. Context: 216.26.228.220 classified as botnet node participating in coordinated attack campaigns (high confidence). show less	Hacking
🇫🇷 Sklurk	2026-08-17 03:33:54 (4 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-05 02:53:31 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-04 02:28:20 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-02 23:59:17 (1 month ago)	Web App Attack	Web App Attack
🇬🇧 Oakley	2026-04-20 10:07:31 (4 months ago)	(antiscrape_rule) Web application abuse detected 216.26.228.220 (US/United States/-): 5 in the last ... show more (antiscrape_rule) Web application abuse detected 216.26.228.220 (US/United States/-): 5 in the last 900 secs show less	Hacking
🇺🇸 TPI-Abuse	2025-12-08 16:49:32 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.220 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 11:49:26.793470 2025] [security2:error] [pid 4952:tid 4952] [client 216.26.228.220:27407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lockdownclaim.com"] [uri "/.svn/wc.db"] [unique_id "aTcBlifBBRKFhrdDIsRaLQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 00:22:49 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.220 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 19:22:42.803330 2025] [security2:error] [pid 18783:tid 18783] [client 216.26.228.220:47891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "owenbee.com"] [uri "/.git/HEAD"] [unique_id "aTYaUlGgfEhIXtXrp5ayOwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 15:38:39 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.220 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:38:31.334504 2025] [security2:error] [pid 21637:tid 21640] [client 216.26.228.220:55887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wassell.org"] [uri "/.git/HEAD"] [unique_id "aTWfd5geMQB_1juj5TpCuQAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 jjnxpct	2025-12-07 04:54:20 (9 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/HEAD (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/HEAD] show less	Hacking Web App Attack
🇺🇸 myagent.site	2025-12-05 00:52:17 (9 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇱🇻 garmtech.com	2025-12-04 19:45:39 (9 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-45.216.26.228.220.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-45.216.26.228.220.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇪🇪 Unwasted	2025-12-04 15:52:51 (9 months ago)	Odoo contact form spam	Web Spam Blog Spam
🇺🇸 TPI-Abuse	2025-11-26 10:17:15 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.220 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:17:09.207531 2025] [security2:error] [pid 15676:tid 15676] [client 216.26.228.220:39001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.900west.com"] [uri "/.git/HEAD"] [unique_id "aSbTpXqvASJc7AFZQpAjOQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 194.35.227.68

🇬🇧 178.128.45.70

🇧🇷 177.204.199.112

🇮🇩 160.22.240.235

🇮🇳 122.165.206.96

🇧🇬 91.92.199.36

🇳🇱 45.8.17.100

🇲🇽 189.254.45.102

🇷🇺 188.235.60.216

🇪🇨 186.42.173.68

🇦🇷 181.209.89.254

🇷🇺 176.211.106.206

🇺🇸 172.233.178.94

🇺🇸 172.110.223.156

🇺🇸 162.33.192.250

🇫🇷 159.26.105.74

🇩🇪 130.12.182.193

🇨🇳 112.31.109.13

🇿🇦 105.184.56.109

🇺🇸 104.192.5.144