JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.26.212

65.111.26.212 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 47%: ?

47%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.26.212

Whois 65.111.26.212

IP Abuse Reports for 65.111.26.212:

This IP address has been reported a total of 25 times from 19 distinct sources. 65.111.26.212 was first reported on June 27th 2024, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-07-22 05:37:12 (5 hours ago)	(wordpress) Failed wordpress login from 65.111.26.212 (ES/Spain/-): (CF_ENABLE)	Brute-Force
🇲🇽 octageeks.com	2026-07-22 04:06:13 (7 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇬🇧 spamverify.com	2026-07-20 16:43:13 (1 day ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-07-14 09:40:10 (1 week ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 conseilgouz	2026-07-13 23:07:54 (1 week ago)	sae-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇯🇵 beon	2026-07-07 01:47:50 (2 weeks ago)	[DateTime=>2026-07-07T01:47:50Z (UTC)] , [HoneyPot_Hit=>once] , [HoneyPot=>/wp-login.php] , [total_H ... show more [DateTime=>2026-07-07T01:47:50Z (UTC)] , [HoneyPot_Hit=>once] , [HoneyPot=>/wp-login.php] , [total_Hit=>once] , [Keyword=>WordPress] show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-20 12:45:51 (1 month ago)	[SatJun2014:45:49.6996532026][security2:error][pid3543778:tid3543795][client65.111.26.212:0]ModSecur ... show more [SatJun2014:45:49.6996532026][security2:error][pid3543778:tid3543795][client65.111.26.212:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"noleggi.ch\"][uri\"/wp-login.php\"][unique_id\"ajaLfVbCdbEcg1NhMLTGJAAAAM4\"]\,referer:https://noleggi.ch/wp-login.php show less	Port Scan Brute-Force Web App Attack
🇬🇷 setupgr	2026-06-19 22:50:33 (1 month ago)	(mod_security) mod_security (id:900001) triggered by 65.111.26.212 (ES/Spain/Madrid/Madrid/-/[AS2003 ... show more (mod_security) mod_security (id:900001) triggered by 65.111.26.212 (ES/Spain/Madrid/Madrid/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 20 01:50:32.673724 2026] [security2:error] [pid 2278:tid 2507] [client 65.111.26.212:42729] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: adoro.gr"] [severity "CRITICAL"] [tag "security"] [hostname "adoro.gr"] [uri "/wp-login.php"] [unique_id "ajXHuAuYeXI6iTUJgvs7-gAAAJQ"], referer: https://adoro.gr/wp-login.php show less	Port Scan
🇲🇹 Malta	2026-06-19 20:10:17 (1 month ago)	65.111.26.212 - - [19/Jun/2026:22:10:17 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 65.111.26.212 - - [19/Jun/2026:22:10:17 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇫🇷 ELYAZ	2026-06-15 16:39:57 (1 month ago)	(y4) Failed scan -byebye- from 65.111.26.212 (ES/Spain/-): (CF_ENABLE)	Hacking
🇲🇹 Malta	2026-06-15 15:27:20 (1 month ago)	65.111.26.212 - - [15/Jun/2026:17:27:20 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linu ... show more 65.111.26.212 - - [15/Jun/2026:17:27:20 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
Anonymous	2026-06-11 04:21:10 (1 month ago)	[server.tmg.gr] httpd-login-spray-site: sites=add2022.gr; logs=/var/log/httpd/domains/add2022.gr.log ... show more [server.tmg.gr] httpd-login-spray-site: sites=add2022.gr; logs=/var/log/httpd/domains/add2022.gr.log; samples=site_wide=true \| distinct_ips=28 \| /wp-login.php show less	Hacking Web App Attack
🇪🇸 10dencehispahard SL	2026-01-28 06:17:53 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
Anonymous	2026-01-05 20:28:08 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:58:32 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇧🇪 172.253.215.29

🇵🇭 113.19.183.184

🇸🇬 47.128.44.122

🇸🇬 47.128.29.76

🇺🇸 45.194.67.28

🇮🇳 2001:4490:4e95:5b0e:41f7:7f7c:817e:8634

🇫🇷 2001:41d0:303:422d::1

🇺🇸 172.245.43.227

🇧🇷 168.90.7.240

🇩🇪 141.11.45.76

🇰🇷 112.162.111.205

🇷🇺 109.173.107.163

🇧🇪 104.155.46.105

🇺🇸 64.23.218.208

🇳🇱 45.148.10.239

🇿🇦 4.221.162.168

🇨🇭 208.69.78.36

🇩🇪 194.187.176.244

🇳🇱 86.54.31.36