JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.230.85

216.26.230.85 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.230.85

Whois 216.26.230.85

IP Abuse Reports for 216.26.230.85:

This IP address has been reported a total of 22 times from 12 distinct sources. 216.26.230.85 was first reported on September 26th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-18 08:01:49 (1 week ago)	Web App Attack	Web App Attack
🇮🇩 securejdprop	2026-07-18 03:46:22 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 67). show less	Hacking Web App Attack
🇫🇷 Sklurk	2026-07-07 17:48:32 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-16 00:08:22 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2025-12-11 10:34:28 (7 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-25 06:14:51 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.230.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.230.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:14:47.078990 2025] [security2:error] [pid 13757:tid 13851] [client 216.26.230.85:19735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.marinkovich.us"] [uri "/.git/HEAD"] [unique_id "aSVJV72j_Ew1xiyiewwuFQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:41:03 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.230.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.230.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:40:55.949160 2025] [security2:error] [pid 1817001:tid 1817058] [client 216.26.230.85:54549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "collegeofdivinescience.aafm.us"] [uri "/.git/HEAD"] [unique_id "aSVBZ2R1ttxeyDpsCa94iwAAAZM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:22:25 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.230.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.230.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:22:19.716358 2025] [security2:error] [pid 15743:tid 15743] [client 216.26.230.85:49989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ruthbalser.org"] [uri "/.env"] [unique_id "aSUu-wLGvV9DdxgAFvJJAgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:19:35 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.230.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.230.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:19:27.733481 2025] [security2:error] [pid 664923:tid 664923] [client 216.26.230.85:41313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wp.marxistphilosophy.org"] [uri "/.env"] [unique_id "aSUSL0SAIlJDn6ur737tFgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2025-11-24 17:28:04 (8 months ago)	(cpanel) Failed cPanel login from 216.26.230.85 (US/United States/-): 1 in the last 3600 secs	Brute-Force Web App Attack
🇺🇸 fbarela	2025-11-19 07:01:20 (8 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-11-19 06:10:38 (8 months ago)	unauthorized access attempts	Brute-Force
🇲🇾 syokadmin	2025-11-08 23:06:14 (8 months ago)	(cpanel) Failed cPanel login from 216.26.230.85 (US/United States/-): 1 in the last 3600 secs	Brute-Force Web App Attack
🇳🇱 i-turnradio.nl	2025-11-03 06:01:37 (8 months ago)	2025-11-03 @ 07:01:37 (CET) ~ Blocked for trying to access: /erker/wp/wp-login.php	Web App Attack
Anonymous	2025-10-29 12:56:20 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.180.141.70

🇳🇱 164.92.216.153

🇫🇷 91.196.152.196

🇺🇸 64.225.17.153

🇰🇷 39.115.195.164

🇺🇸 20.169.105.90

🇺🇸 2a09:bac5:6368:323c::501:1a

🇺🇸 203.88.121.4

🇷🇺 176.195.68.106

🇧🇾 146.120.32.22

🇭🇰 118.193.45.134

🇻🇳 112.197.34.29

🇺🇸 68.82.141.145

🇮🇳 49.43.133.203

🇳🇱 5.61.209.92

🇮🇳 4.240.51.2

🇩🇪 167.94.145.22

🇭🇰 45.249.246.196

🇬🇧 35.203.211.157

🇺🇸 24.199.119.233