JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.230.92

216.26.230.92 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.230.92

Whois 216.26.230.92

IP Abuse Reports for 216.26.230.92:

This IP address has been reported a total of 40 times from 19 distinct sources. 216.26.230.92 was first reported on September 26th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 FEWA	2026-06-06 10:34:53 (6 days ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
🇩🇪 wupinyin	2026-06-06 10:28:37 (6 days ago)	CrowdSec ban: ET DROP Spamhaus DROP Listed Traffic Inbound group 64	Port Scan Hacking
🇯🇵 beon	2026-05-16 07:31:34 (3 weeks ago)	[DateTime=>2026-05-16T07:31:34Z (UTC)] , [404target=>/${url}] , [total_Hit=>once]	Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-05-10 10:39:33 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-07 04:38:54 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇱🇻 garmtech.com	2026-05-06 13:37:42 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-37.216.26.230.92.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-37.216.26.230.92.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇮🇹 main.ows	2026-03-05 20:06:27 (3 months ago)	[05/Mar/2026:21:06:25.871421 +0100] aaniQeOybglOVUi0jeNyEgAAAAw 216.26.230.92 57618 217.61.13.167 70 ... show more [05/Mar/2026:21:06:25.871421 +0100] aaniQeOybglOVUi0jeNyEgAAAAw 216.26.230.92 57618 217.61.13.167 7081 ... show less	Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2026-01-25 02:42:29 (4 months ago)	(From [email protected]) If you’re tired of the 9-to-5 grind or just want a way to put some ex ... show more (From [email protected]) If you’re tired of the 9-to-5 grind or just want a way to put some extra cash in your pocket every week, I have something for you. Companies are currently looking for remote writers to handle: Article Writing Blog Posts Social Media Content Live Chat Support No experience is necessary and full training is provided. But before you apply, you need to see which role you’re best suited for. Go here to take the Writing Job Quiz. ---> http://PaidToWrite.Online/ Once you finish the quiz, you’ll get a breakdown of the best opportunities available for you right now. Visit -----> http://PaidToWrite.Online/ show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-01-24 14:41:04 (4 months ago)	(From [email protected]) Tired of low-quality traffic? Join GTC and start getting 100% targeted, ... show more (From [email protected]) Tired of low-quality traffic? Join GTC and start getting 100% targeted, real visitors who are actively searching for your offer. Boost your conversions and grow your business the smart way. Click to Join & Get Targeted Clicks Today! ----> https://morewebtraffic.online/ show less	Phishing Web Spam
🇩🇪 Packets-Decreaser.NET	2025-12-31 01:01:15 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇵🇱 sefinek.net	2025-12-14 09:34:19 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 OceanTreasure	2025-12-10 10:55:13 (6 months ago)	tcp/443; Probing for exposed Git repository HEAD file: "GET /.git/HEAD" @ 2025-12-10T10:50:57Z [prox ... show more tcp/443; Probing for exposed Git repository HEAD file: "GET /.git/HEAD" @ 2025-12-10T10:50:57Z [proxy] show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-09 22:42:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.230.92 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.230.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 17:42:15.644180 2025] [security2:error] [pid 18558:tid 18635] [client 216.26.230.92:31243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "themarketplacelb.com"] [uri "/.svn/wc.db"] [unique_id "aTilx7te_Dz0ZvY7Zw4xQgAAAFM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 14:53:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.230.92 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.230.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 09:52:59.574506 2025] [security2:error] [pid 7560:tid 7560] [client 216.26.230.92:50229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enlightened-workplace.com"] [uri "/.env"] [unique_id "aTbmS37ktm7V-PQRe1cwMwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 13:10:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.230.92 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.230.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 08:10:03.235028 2025] [security2:error] [pid 18809:tid 18809] [client 216.26.230.92:24425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adventiststoday.com"] [uri "/.git/HEAD"] [unique_id "aTbOKwzdTGeExYutbbYnnwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.165

🇫🇮 193.163.89.34

🇳🇱 192.42.116.110

🇰🇷 183.103.217.221

🇦🇷 168.197.250.14

🇩🇪 130.12.180.174

🇳🇱 86.54.31.36

🇮🇳 40.81.224.201

🇬🇧 35.203.211.200

🇨🇴 185.42.21.94

🇺🇸 147.185.132.164

🇫🇷 85.217.140.6

🇧🇷 186.225.35.36

🇻🇳 103.78.0.229

🇪🇸 90.106.178.197

🇺🇸 64.49.36.87

🇫🇮 62.238.40.60

🇸🇬 47.237.13.79

🇧🇷 45.170.144.62

🇨🇳 182.43.235.75