JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.26.142

65.111.26.142 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 55%: ?

55%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.26.142

Whois 65.111.26.142

IP Abuse Reports for 65.111.26.142:

This IP address has been reported a total of 30 times from 18 distinct sources. 65.111.26.142 was first reported on June 27th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-07-01 09:56:22 (1 day ago)	(y4) Failed scan -byebye- from 65.111.26.142 (ES/Spain/-): (CF_ENABLE)	Hacking
Anonymous	2026-06-30 19:07:15 (2 days ago)	[ssd5.kdns.gr] httpd-login-spray-site: sites=www.hparxo.gr; logs=/var/log/httpd/domains/hparxo.gr.lo ... show more [ssd5.kdns.gr] httpd-login-spray-site: sites=www.hparxo.gr; logs=/var/log/httpd/domains/hparxo.gr.log; samples=site_wide=true \| distinct_ips=16 \| /wp-login.php show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-06-29 04:22:58 (3 days ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack
🇫🇷 tecnicorioja	2026-06-28 22:01:32 (4 days ago)	wp-login attack [28/Jun/2026:07:35:00	Brute-Force Web App Attack
Anonymous	2026-06-28 07:45:23 (4 days ago)	Web attack blocked by Wordfence on mezzia.nl (1 hit). Reported by CRMON.	Web App Attack
🇺🇸 xmission.com	2026-06-27 19:54:21 (5 days ago)	65.111.26.142 - - [27/Jun/2026:13:54:21 -0600] "POST /xmlrpc.php HTTP/1.1" 200 413 "https://www.goog ... show more 65.111.26.142 - - [27/Jun/2026:13:54:21 -0600] "POST /xmlrpc.php HTTP/1.1" 200 413 "https://www.google.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Web App Attack
Anonymous	2026-06-23 00:00:25 (1 week ago)	[da.kdns.gr] httpd-login-spray-site: sites=global; logs=/var/log/httpd/access_log; samples=site_wide ... show more [da.kdns.gr] httpd-login-spray-site: sites=global; logs=/var/log/httpd/access_log; samples=site_wide=true \| distinct_ips=20 \| /wp-login.php show less	Hacking Web App Attack
🇬🇧 poundawebsiteltd	2026-06-22 18:38:20 (1 week ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 65.111.26.142 - - [22/Jun/2026:19:38:13 +0100] P ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 65.111.26.142 - - [22/Jun/2026:19:38:13 +0100] POST /wp-login.php HTTP/1.1 200 10078 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 show less	Web App Attack
🇫🇷 ELYAZ	2026-06-20 18:57:33 (1 week ago)	(y4) Failed scan -byebye- from 65.111.26.142 (ES/Spain/-): (CF_ENABLE)	Hacking
🇺🇸 mnsf	2026-06-16 03:05:45 (2 weeks ago)	Login Too Frequent (7)	Brute-Force Web App Attack
🇲🇹 Malta	2026-06-15 15:25:10 (2 weeks ago)	65.111.26.142 - - [15/Jun/2026:17:25:10 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh ... show more 65.111.26.142 - - [15/Jun/2026:17:25:10 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 mnsf	2026-06-13 02:05:33 (2 weeks ago)	Login Too Frequent (7)	Brute-Force Web App Attack
🇬🇧 poundawebsiteltd	2026-06-11 11:30:05 (3 weeks ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 65.111.26.142 - - [11/Jun/2026:12:30:02 +0100] P ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 65.111.26.142 - - [11/Jun/2026:12:30:02 +0100] POST /wp-login.php HTTP/1.1 301 3454 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 show less	Web App Attack
🇬🇷 setupgr	2026-06-11 05:57:35 (3 weeks ago)	(mod_security) mod_security (id:900001) triggered by 65.111.26.142: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:900001) triggered by 65.111.26.142: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 11 08:57:31.922026 2026] [security2:error] [pid 2070000:tid 2070036] [client 65.111.26.142:55821] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.cpanagiotou.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.cpanagiotou.gr"] [uri "/wp-login.php"] [unique_id "aipOS__NU8LTVBV2DmFsogAAAMA"], referer: https://mail.cpanagiotou.gr/wp-login.php show less	Port Scan
🇪🇸 loadsoporte	2026-01-01 18:41:36 (6 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 185.116.161.213

🇺🇸 50.6.248.168

🇲🇾 49.124.155.180

🇲🇾 49.124.152.235

🇭🇰 46.247.61.208

🇮🇱 46.210.94.61

🇨🇳 14.29.214.161

🇩🇪 216.26.254.232

🇧🇬 193.24.211.107

🇩🇪 118.193.58.120

🇭🇰 116.48.151.136

🇨🇳 112.24.99.134

🇮🇱 109.186.71.7

🇺🇸 81.30.98.66

🇺🇸 57.141.6.79

🇭🇰 45.249.247.86

🇰🇪 41.89.96.242

🇬🇧 35.203.211.131

🇺🇸 18.116.101.220

🇧🇷 203.188.168.193