JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.26.188

65.111.26.188 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 32%: ?

32%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.26.188

Whois 65.111.26.188

IP Abuse Reports for 65.111.26.188:

This IP address has been reported a total of 36 times from 15 distinct sources. 65.111.26.188 was first reported on July 3rd 2024, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-22 04:06:18 (18 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇽 octageeks.com	2026-07-20 04:10:14 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2026-07-09 21:30:09 (1 week ago)	WordPress Brute Force	Brute-Force
🇩🇪 london2038.com	2026-06-24 10:24:37 (4 weeks ago)	Detected by WP fail2ban 2026-06-24T12:24:36.656380+02:00 wordpress: Authentication attempt from 65.1 ... show more Detected by WP fail2ban 2026-06-24T12:24:36.656380+02:00 wordpress: Authentication attempt from 65.111.26.188 show less	Brute-Force Web App Attack
🇫🇷 tecnicorioja	2026-06-22 22:01:12 (1 month ago)	wp-login attack [22/Jun/2026:08:08:52	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-06-21 14:01:57 (1 month ago)	(y4) Failed scan -byebye- from 65.111.26.188 (ES/Spain/-): (CF_ENABLE)	Hacking
🇬🇷 setupgr	2026-06-20 01:01:19 (1 month ago)	(mod_security) mod_security (id:900001) triggered by 65.111.26.188 (ES/Spain/Madrid/Madrid/-/[AS2003 ... show more (mod_security) mod_security (id:900001) triggered by 65.111.26.188 (ES/Spain/Madrid/Madrid/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 20 04:01:16.865508 2026] [security2:error] [pid 2278:tid 2408] [client 65.111.26.188:31305] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: villa-izabela.com"] [severity "CRITICAL"] [tag "security"] [hostname "villa-izabela.com"] [uri "/wp-login.php"] [unique_id "ajXmXAuYeXI6iTUJgvs_vwAAAII"], referer: https://villa-izabela.com/wp-login.php show less	Port Scan
🇭🇺 bcsaba	2026-06-18 01:36:49 (1 month ago)	CMS (WordPress or Joomla) login attempt. 65.111.26.188 - - [18/Jun/2026:03:36:47 +0200] "POST /wp-lo ... show more CMS (WordPress or Joomla) login attempt. 65.111.26.188 - - [18/Jun/2026:03:36:47 +0200] "POST /wp-login.php HTTP/1.1" 200 3076 "https://REDACTED/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:118.0) Gecko/20100101 Firefox/118.0" show less	Hacking Brute-Force Web App Attack
🇺🇸 oncord	2026-03-19 04:16:01 (4 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-03-02 03:49:40 (4 months ago)	Form spam	Web Spam
🇺🇸 oncord	2026-02-20 13:55:07 (5 months ago)	Form spam	Web Spam
🇨🇭 backslash	2026-02-20 05:46:01 (5 months ago)	block ruleset 6A1105329D233F6F53B9B61CE056BD4DAAE75AB4	Web Spam
🇺🇸 TPI-Abuse	2026-02-19 04:56:42 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.26.188 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.26.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 23:56:37.878367 2026] [security2:error] [pid 20530:tid 20530] [client 65.111.26.188:58665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konzel.com"] [uri "/app/.env"] [unique_id "aZaYBXhZVGcjQNkSlOqQSAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 02:55:42 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.26.188 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.26.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:55:38.841870 2026] [security2:error] [pid 1282:tid 1282] [client 65.111.26.188:31679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelvinlouie.com"] [uri "/admin/.env"] [unique_id "aZZ7qgg7R8vD7tr4LYfV3gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-19 02:53:22 (5 months ago)	Blocking for trying to access an exploit file: /.env.local	Hacking

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.158

🇺🇸 162.216.150.16

🇺🇸 147.185.132.33

🇳🇱 146.103.115.115

🇧🇷 143.0.56.91

🇳🇱 91.92.42.126

🇳🇱 62.164.177.222

🇬🇧 51.195.244.50

🇶🇦 20.173.99.19

🇩🇪 185.137.164.8

🇦🇪 165.154.12.137

🇳🇱 45.148.10.151

🇨🇳 14.103.118.190

🇳🇱 5.129.237.28

🇨🇦 4.239.240.98

🇬🇧 2a06:4880:2000::40

🇩🇪 185.137.164.9

🇺🇸 172.239.32.185

🇺🇸 172.58.113.24

🇷🇴 2.57.121.112