JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.231.195

216.26.231.195 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 24%: ?

24%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.231.195

Whois 216.26.231.195

IP Abuse Reports for 216.26.231.195:

This IP address has been reported a total of 33 times from 16 distinct sources. 216.26.231.195 was first reported on September 26th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-09-01 09:14:07 (1 day ago)	[09:14] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [09:14] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇫🇷 Sklurk	2026-09-01 03:34:04 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 lostswordfish.com	2026-08-28 17:02:03 (5 days ago)	Wordfence waf block on 1105merrystreet	Web App Attack
🇫🇷 Sklurk	2026-08-10 04:20:09 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-03 00:47:28 (4 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-16 00:50:23 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-23 04:53:45 (2 months ago)	Web App Attack	Web App Attack
Anonymous	2026-05-13 11:41:28 (3 months ago)	RdpGuard detected brute-force attempt on RD-WEB	Brute-Force
🇺🇸 cyfordtechnologies.com	2026-05-03 17:19:22 (3 months ago)	High-abuse ASN prefix: 216.26. : Reported by Cyford API	Web App Attack
Anonymous	2025-12-11 16:30:41 (8 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-26 03:10:25 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.195 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:10:19.737416 2025] [security2:error] [pid 797:tid 848] [client 216.26.231.195:52831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.boxwoodgarden.com"] [uri "/.svn/wc.db"] [unique_id "aSZvm7vbTVXiKk5sQ0YUPAAAAEo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:47:54 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.195 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:47:45.681933 2025] [security2:error] [pid 29315:tid 29315] [client 216.26.231.195:11147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bilimkurgumanyagi.com"] [uri "/.git/HEAD"] [unique_id "aSZqUfqkZr96EnaNYeNEeQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-11-26 02:00:54 (9 months ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 00:25:15 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.195 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:25:10.015016 2025] [security2:error] [pid 3932:tid 3932] [client 216.26.231.195:27821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thoughtage.com"] [uri "/.git/HEAD"] [unique_id "aSZI5rb4utyxshPTL9zglQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:47:37 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.195 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:47:29.607870 2025] [security2:error] [pid 30764:tid 30764] [client 216.26.231.195:47909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.whitmarshinc.com"] [uri "/.git/HEAD"] [unique_id "aSQNkfIyRAXliUod2KiXCwAAACA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 2c0f:fb50:4001:1::12a

🇹🇭 203.154.158.195

🇩🇪 185.220.101.99

🇮🇳 103.48.197.132

🇺🇸 34.74.17.119

🇨🇳 14.103.83.214

🇺🇸 204.8.96.146

🇭🇰 202.60.229.5

🇿🇦 196.32.236.10

🇺🇸 195.184.76.184

172.16.36.17

🇺🇸 170.106.153.232

100.71.213.172

🇧🇬 79.124.49.70

🇦🇱 79.106.242.221

🇱🇹 77.90.185.20

🇺🇸 48.214.145.236

🇺🇸 47.251.34.170

10.146.49.59

🇦🇺 192.250.232.93