JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.231.137

216.26.231.137 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 8%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.231.137

Whois 216.26.231.137

IP Abuse Reports for 216.26.231.137:

This IP address has been reported a total of 22 times from 9 distinct sources. 216.26.231.137 was first reported on October 1st 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hary74656	2026-05-29 05:29:14 (3 weeks ago)	[Fri May 29 07:29:06.193182 2026] [core:info] [pid 231133:tid 231360] [client 216.26.231.137:43993] ... show more [Fri May 29 07:29:06.193182 2026] [core:info] [pid 231133:tid 231360] [client 216.26.231.137:43993] AH00128: File does not exist: /home/harald/www/default_host/blog/wp-includes/wlwmanifest.xml ... show less	Bad Web Bot
🇺🇸 cyfordtechnologies.com	2026-05-02 14:47:40 (1 month ago)	High-abuse ASN prefix: 216.26. : Reported by Cyford API	Web App Attack
🇺🇸 cyfordtechnologies.com	2026-03-29 02:14:59 (2 months ago)	High-abuse ASN prefix: 216.26. : Reported by Cyford API	Web App Attack
🇮🇹 VHosting	2025-12-24 07:15:18 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-11 10:51:18 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-25 04:54:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:54:11.980667 2025] [security2:error] [pid 14086:tid 14086] [client 216.26.231.137:41715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.les-volets-bleus.com"] [uri "/.git/HEAD"] [unique_id "aSU2cxLGvpbMB7K3sxqbaQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:53:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:53:10.678286 2025] [security2:error] [pid 756398:tid 756398] [client 216.26.231.137:44139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.3rdid7thinf.org"] [uri "/.env"] [unique_id "aSUoJgIcZfwpQdL84d9EbAAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:14:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:14:40.781802 2025] [security2:error] [pid 18451:tid 18451] [client 216.26.231.137:39845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ameliaschaaf.lawyer"] [uri "/.env"] [unique_id "aSUfIBgKFHcNetzxGL1JEQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:33:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:33:37.885599 2025] [security2:error] [pid 19504:tid 19504] [client 216.26.231.137:37389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.controvac.com"] [uri "/.env"] [unique_id "aSUHcRB1KP2GChycVMsLegAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:10:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:10:03.344907 2025] [security2:error] [pid 27868:tid 27868] [client 216.26.231.137:35679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.wgs.cc"] [uri "/.git/HEAD"] [unique_id "aSUB642X0oWPUBSBGJYKtgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:02:03 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:01:55.398880 2025] [security2:error] [pid 24707:tid 24707] [client 216.26.231.137:47947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aycart.es"] [uri "/.svn/wc.db"] [unique_id "aSQQ86jp3iCixrwlMMkfVAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:50:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:50:30.404444 2025] [security2:error] [pid 14138:tid 14138] [client 216.26.231.137:49415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "97201.com"] [uri "/.git/HEAD"] [unique_id "aSPkFt6V886dpyMvliW1aQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-28 22:44:17 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-17 16:48:07 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-17 03:37:00 (8 months ago)	GlobalProtect login attempts with user hwhyde.	VPN IP Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 211.22.166.107

🇮🇩 202.145.0.61

🇧🇪 198.235.24.203

🇧🇷 170.84.1.105

🇩🇪 138.68.82.23

🇨🇳 120.48.42.17

🇷🇴 92.118.39.62

🇺🇸 3.216.227.216

🇺🇸 172.120.148.110

🇺🇸 207.244.229.192

🇧🇪 198.235.24.200

🇷🇴 193.46.255.86

🇬🇧 185.216.145.174

🇨🇳 183.66.135.22

🇧🇷 177.55.75.17

🇫🇷 176.191.43.176

🇺🇸 152.32.234.120

🇮🇳 113.11.231.104

🇨🇳 111.29.38.32

🇮🇩 103.186.31.66