JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.228.247

216.26.228.247 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 26%: ?

26%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.228.247

Whois 216.26.228.247

IP Abuse Reports for 216.26.228.247:

This IP address has been reported a total of 29 times from 16 distinct sources. 216.26.228.247 was first reported on October 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 fbarela	2026-08-24 17:00:23 (1 day ago)	FortiGate SSL VPN login failures.	Brute-Force Hacking
🇸🇬 securejdprop	2026-08-12 16:40:56 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 67). show less	Hacking Web App Attack
🇦🇺 oncord	2026-08-08 18:12:37 (2 weeks ago)	Form spam	Web Spam
🇫🇷 Sklurk	2026-07-18 05:22:35 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 webgobe	2026-07-11 09:18:38 (1 month ago)	wew-Joomla User : try to access forms...	Hacking
🇫🇷 Sklurk	2026-06-20 03:23:52 (2 months ago)	Web App Attack	Web App Attack
🇱🇻 garmtech.com	2026-05-15 13:12:03 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-12.216.26.228.247.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-12.216.26.228.247.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-08 05:27:03 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-27.216.26.228.247.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-27.216.26.228.247.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-07 15:43:09 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-43.216.26.228.247.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-43.216.26.228.247.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-05 12:13:16 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-13.216.26.228.247.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-13.216.26.228.247.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-04-12 06:39:10 (4 months ago)	Attempt to scan vulnerabilities	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (4 months ago)	"DDoS against public endpoint"	DDoS Attack
🇬🇧 relianoid.com	2026-02-01 21:15:11 (6 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 TPI-Abuse	2026-01-21 13:56:36 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 08:56:33.203216 2026] [security2:error] [pid 1699841:tid 1699848] [client 216.26.228.247:14413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandiegosamsolo.com"] [uri "/.git/HEAD"] [unique_id "aXDbEV2WSIQ1GCFj4QiDIQAAAEM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-21 06:02:15 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 01:02:11.292805 2026] [security2:error] [pid 28199:tid 28199] [client 216.26.228.247:36611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/.svn/wc.db"] [unique_id "aXBr461UW1PVz5aOz-w_1AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 193.169.127.6

🇲🇽 148.204.85.218

🇷🇴 141.98.83.48

🇺🇸 104.152.52.73

🇺🇸 104.152.52.67

🇺🇸 104.152.52.65

🇺🇸 104.152.52.63

🇺🇸 104.152.52.62

🇺🇸 104.152.52.56

🇸🇬 84.75.155.184

🇸🇬 84.75.155.3

🇭🇰 183.87.99.121

🇵🇰 175.107.233.134

🇫🇷 90.120.161.144

🇳🇱 85.11.167.191

🇧🇬 79.124.56.222

🇬🇧 35.203.210.61

🇺🇸 34.139.77.106

🇧🇪 34.76.225.223

🇧🇩 2a09:bac5:484:18be::277:69