82.26.128.101

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
88% Critical
18 reports
16 reporters · latest 1 hour ago
ISP
Internet Utilities Europe and Asia Limited
Usage Type
Fixed Line ISP
ASN
AS3320
Domain Name
netutils.io
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 9 🇺🇸 United States of America 4 🇳🇱 Netherlands 3
Most common categories Web App Attack 17 Hacking 3 Bad Web Bot 3 Brute-Force 3 Exploited Host 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 compliance-assurance.com
GET /vr/images/captcha_temp (404 probe)
Bad Web Bot Web App Attack
🇺🇸 HamSammich
Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-11-14T18:35Z).
Port Scan Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host Web App Attack
🇺🇸 RH5
Restricted URL probing (/phpinfo.php) (UTC 2026-11-14 01:14)
Web App Attack
🇩🇪 filstal.org
Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths.
Hacking Web App Attack
🇩🇪 todix
"GET /api HTTP/1.1" 404 43730 "/api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
Web App Attack
Anonymous
[ns65.kdns.gr] httpd-config-scan: sites=madesign.gr; logs=/var/log/httpd/domains/madesign.gr.log; samples=/%2egit/%48ead | /actuator/heapdump | fast_lane=true kernel_at=2026-11-13T17:41:53+00:00
Hacking Web App Attack
Anonymous
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
Brute-Force Web App Attack
🇧🇪 cmbplf
115 requests with url.path *.aws/*
Brute-Force Bad Web Bot
🇳🇱 Mangelot Hosting
(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 82.26.128.101 (DE/Germany/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇩🇪 todix
"GET /api/4/config HTTP/1.1" 404 39182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host Web App Attack
🇸🇪 vaia.cloud
crowdsecurity/CVE-2023-49103
Brute-Force Web App Attack
🇳🇱 Alt255
Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting
High-confidence malicious configuration/VCS probe
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 213.232.120.61
🇺🇸 205.210.31.13
🇨🇳 150.139.201.247
🇫🇷 92.139.14.218
🇺🇸 85.121.215.194
🇺🇦 37.52.68.231
🇺🇸 34.85.250.187
🇳🇱 34.7.32.228
🇸🇬 15.235.193.26
🇳🇱 192.42.116.117
🇩🇪 169.150.211.197
🇺🇸 162.216.150.86
🇺🇸 157.254.223.35
🇺🇸 136.85.250.229
🇮🇳 117.236.124.166
🇮🇳 103.79.252.255
🇺🇸 100.40.220.214
🇺🇸 85.121.215.188
🇺🇦 80.93.116.174
🇺🇸 72.80.110.177
feedback