JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.228.34

216.26.228.34 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.228.34

Whois 216.26.228.34

IP Abuse Reports for 216.26.228.34:

This IP address has been reported a total of 28 times from 12 distinct sources. 216.26.228.34 was first reported on September 27th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-04-03 06:25:54 (2 months ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇪🇸 10dencehispahard SL	2026-01-26 10:16:46 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-01-21 14:10:32 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 09:10:27.858020 2026] [security2:error] [pid 31715:tid 31715] [client 216.26.228.34:10335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cuulphotos.com"] [uri "/.git/HEAD"] [unique_id "aXDeU_4xLGiIrvrXY7bpsgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-01-21 00:59:14 (4 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇬🇧 openstrike.co.uk	2025-12-05 06:13:44 (6 months ago)	2 attacks on password grabbing URLs: GET /.aws/credentials HTTP/1.1	Hacking
🇺🇸 TPI-Abuse	2025-12-03 08:28:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 03:28:25.239251 2025] [security2:error] [pid 26949:tid 26949] [client 216.26.228.34:17115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bipocmentalhealthcoalition.org"] [uri "/.env"] [unique_id "aS_0qcdt7vKSDn8BkAjM1wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-01 11:35:59 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-26 05:56:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:56:36.601247 2025] [security2:error] [pid 5612:tid 5612] [client 216.26.228.34:39487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rockwaychiropractic.com"] [uri "/.env"] [unique_id "aSaWlNAYG7HYgP91aZBbwQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:04:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:04:28.387704 2025] [security2:error] [pid 23756:tid 23756] [client 216.26.228.34:31527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.walkerweb.net"] [uri "/.svn/wc.db"] [unique_id "aSZEDNieziVnEdsoUYrIvQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:51:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:51:41.217421 2025] [security2:error] [pid 10138:tid 10138] [client 216.26.228.34:25031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "switchtool.iworklife.org"] [uri "/.env"] [unique_id "aST9nau-xWOzrUZwJRbnCQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:26:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:25:56.957360 2025] [security2:error] [pid 27439:tid 27547] [client 216.26.228.34:48291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.duplexgoldmine.com"] [uri "/.env"] [unique_id "aSQkpAdRJ-GlrOkYv176igAAANA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:20:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:20:48.697393 2025] [security2:error] [pid 19838:tid 19838] [client 216.26.228.34:47501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.medcoarabia.com"] [uri "/.git/HEAD"] [unique_id "aSQVYC4DAqXBopZVj7XE8wAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:23:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:23:32.240163 2025] [security2:error] [pid 28506:tid 28506] [client 216.26.228.34:20537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thevillageartcenter.com"] [uri "/.env"] [unique_id "aSPr1GfFdTVzcgoQ47VzcQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:36:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.228.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:36:37.164850 2025] [security2:error] [pid 2123:tid 2163] [client 216.26.228.34:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.humanet.io"] [uri "/.git/HEAD"] [unique_id "aSPg1ZHiwP1EJ36OCvK7rQAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 203.215.167.149

🇩🇪 185.242.3.226

🇭🇰 118.193.44.184

🇺🇸 103.143.231.24

🇺🇸 66.132.172.36

🇫🇷 62.210.38.102

🇺🇸 2604:a880:400:d1:0:4:8c02:9001

🇨🇳 220.250.52.75

🇨🇭 209.99.190.113

🇺🇸 136.117.153.84

🇮🇪 3.254.159.181

🇬🇧 195.96.139.167

🇺🇦 185.218.138.56

🇧🇷 170.80.65.140

🇻🇳 103.82.132.16

🇧🇬 91.191.209.46

🇪🇸 82.223.190.50

🇰🇿 37.151.47.27

🇸🇬 208.109.9.180

🇺🇸 137.184.228.138