JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.231.56

216.26.231.56 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 40%: ?

40%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.231.56

Whois 216.26.231.56

IP Abuse Reports for 216.26.231.56:

This IP address has been reported a total of 37 times from 15 distinct sources. 216.26.231.56 was first reported on September 26th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 gigatech	2026-07-31 02:45:07 (16 hours ago)	Webserver Probing	Web App Attack
🇲🇽 octageeks.com	2026-07-30 04:22:00 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2026-07-29 07:00:00 (2 days ago)	Apache probe; attempts=35; exact paths: /xmlrpc.php	Web App Attack
🇺🇸 lostswordfish.com	2026-07-27 18:16:02 (4 days ago)	Wordfence waf block on uvfousor WPIDD	Web App Attack
🇲🇽 octageeks.com	2026-07-26 04:12:50 (5 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 conseilgouz	2026-07-24 14:04:41 (1 week ago)	sle-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇫🇷 pm33	2026-07-23 12:43:51 (1 week ago)	Wordpress login attempts	Brute-Force
🇺🇸 fbarela	2026-01-24 22:01:09 (6 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇮🇹 VHosting	2025-12-24 05:10:23 (7 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-09 13:37:11 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 08:37:07.071375 2025] [security2:error] [pid 25568:tid 25568] [client 216.26.231.56:48129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rangerroma.com"] [uri "/.svn/wc.db"] [unique_id "aTgmAzU1RvIXlga5ZW73EwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Shaik Sai Meera	2025-12-09 03:15:12 (7 months ago)	IM360 WAF: Hidden file access	Brute-Force
🇺🇸 TPI-Abuse	2025-12-06 17:21:48 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 12:21:44.164633 2025] [security2:error] [pid 31540:tid 31540] [client 216.26.231.56:57117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "niftythrifty.net"] [uri "/.git/HEAD"] [unique_id "aTRmKPLaJZvUQw1--6-VrAAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 15:33:49 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 10:33:42.623387 2025] [security2:error] [pid 29971:tid 29971] [client 216.26.231.56:13503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mylesmitchell.com"] [uri "/.env"] [unique_id "aTL7Vla8Ndsy9xEjzeH54wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 09:46:14 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:46:06.230404 2025] [security2:error] [pid 14989:tid 14989] [client 216.26.231.56:45373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davefortier.com"] [uri "/.env"] [unique_id "aTKp3qr3o2YSkKjztn5-MwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 03:05:55 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:05:52.017183 2025] [security2:error] [pid 29901:tid 29901] [client 216.26.231.56:41979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "purebinary.com"] [uri "/.git/HEAD"] [unique_id "aTJMEGuyuAEEoHUmnWLqAAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.224

🇬🇧 35.203.210.214

🇬🇧 35.203.210.22

🇨🇳 27.128.171.39

🇩🇪 2.28.12.171

🇭🇰 223.197.186.7

🇧🇷 205.210.31.209

🇺🇸 192.34.63.12

🇪🇸 170.253.5.158

🇺🇸 71.6.134.233

🇺🇸 35.87.196.246

🇺🇸 34.148.8.63

🇧🇪 198.235.24.167

🇩🇪 151.243.11.237

🇨🇳 106.117.114.171

🇬🇧 94.229.64.171

🇷🇴 80.94.92.109

🇸🇬 47.82.54.149

🇺🇸 32.199.137.246

🇸🇬 212.73.148.28