JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.26.225.224

200.26.225.224 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 59%: ?

59%

ISP	Giza S.A.
Usage Type	Fixed Line ISP
ASN	AS269870
Domain Name	sista.ar
Country	🇦🇷 Argentina
City	La Plata, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.26.225.224

Whois 200.26.225.224

IP Abuse Reports for 200.26.225.224:

This IP address has been reported a total of 31 times from 25 distinct sources. 200.26.225.224 was first reported on May 15th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Zkillu	2026-08-19 20:01:08 (3 days ago)	UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 80 across 24 dst IP(s), 2026-08-19 21:46 to 2 ... show more UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 80 across 24 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 20:01:08 (3 days ago)	UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 80 across 24 dst IP(s), 2026-08-19 21:46 to 2 ... show more UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 80 across 24 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 MPL	2026-08-18 20:01:29 (4 days ago)	tcp ports: 22,23 (4 or more attempts)	Port Scan
🇫🇷 Stara	2026-08-18 06:50:20 (4 days ago)	Port scan detected - multiple connection attempts to various ports	Port Scan Brute-Force SSH
🇧🇷 noconex	2026-08-18 00:19:10 (5 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 200.26.225 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 200.26.225.224 show less	Port Scan Brute-Force SSH
🇮🇳 Parth Maniar	2026-08-17 04:47:20 (6 days ago)	This IP address carried out 2 port scanning attempts on 16-08-2026. For more information or to repor ... show more This IP address carried out 2 port scanning attempts on 16-08-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇩🇪 klaus_ph	2026-08-16 08:57:50 (6 days ago)	200.26.225.224 - - [15/Aug/2026:04:33:47 +0200] "GET /lka/Record/a0005832/Cite?lng=ca HTTP/1.1" 500 ... show more 200.26.225.224 - - [15/Aug/2026:04:33:47 +0200] "GET /lka/Record/a0005832/Cite?lng=ca HTTP/1.1" 500 24094 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_7_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" ... show less	Bad Web Bot
🇺🇸 johuang92	2026-08-15 08:42:47 (1 week ago)	Cowrie SSH honeypot: session c71e4587c2b1	SSH
Anonymous	2026-08-15 08:03:24 (1 week ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
Anonymous	2026-08-14 23:05:48 (1 week ago)	Blocked by ModSec and CSF	Port Scan
🇵🇱 mkey	2026-08-11 19:15:01 (1 week ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=22 \| HITS=2 \| IPSET=ADD \| FIRST=2026-08-11 21:13:48 \| LAST=2026-08-11 21:13:49. Last seen 2026-08-11 21:13:49. show less	Port Scan
🇺🇸 kosada.com	2026-08-05 23:58:39 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-07-09 21:20:18 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 Vegascosmetics	2026-07-01 09:53:05 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇩 hermawan	2026-06-13 15:43:59 (2 months ago)	[Sat Jun 13 22:43:58.474995 2026] [security2:error] [pid 1054102:tid 139664569640640] [client 200.26 ... show more [Sat Jun 13 22:43:58.474995 2026] [security2:error] [pid 1054102:tid 139664569640640] [client 200.26.225.224:39278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur"] [unique_id "ai16vjKeg8yGIbd2ar-xVAABQQU"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1054108] [eSscduTVwVc] [ai16vjKeg8yGIbd2ar-xVAABQQU] keep_alive=[1] ... show less	Email Spam Hacking

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 153.68.213.202

🇧🇷 148.222.209.88

🇫🇮 147.185.133.54

🇷🇺 136.169.235.227

🇺🇸 45.43.57.106

🇺🇸 24.127.178.91

🇨🇳 220.197.85.23

🇯🇵 205.188.148.235

🇺🇸 147.185.132.109

🇷🇺 147.45.211.139

🇬🇧 145.241.233.71

🇺🇸 54.204.12.115

🇨🇳 39.174.42.18

🇯🇵 8.216.6.206

🇺🇸 3.130.168.2

🇨🇳 221.14.17.106

🇹🇭 203.170.192.251

🇵🇾 181.123.136.11

🇧🇩 114.130.98.182

🇻🇳 103.172.236.241