JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.26.106.239

94.26.106.239 was found in our database!

This IP was reported 414 times. Confidence of Abuse is 100%: ?

100%

ISP	TechTies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197170
Domain Name	tech-ties.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.26.106.239

Whois 94.26.106.239

IP Abuse Reports for 94.26.106.239:

This IP address has been reported a total of 414 times from 207 distinct sources. 94.26.106.239 was first reported on April 19th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-25 00:43:54 (3 weeks ago)	Attack detected: 94.26.106.239 [2026-07-25] Categories: 18 --- wp-login brute force (145 hits) --- 9 ... show more Attack detected: 94.26.106.239 [2026-07-25] Categories: 18 --- wp-login brute force (145 hits) --- 94.26.106.239 - - [04/Jun/2026:21:11:54 +0000] "POST /wp-login.php HTTP/1.1" 200 4968 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/119.0.1" 94.26.106.239 - - [04/Jun/2026:21:11:54 +0000] "POST /wp-login.php HTTP/1.1" 200 4968 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 94.26.106.239 - - [04/Jun/2026:21:11:55 +0000] "POST /wp-login.php HTTP/1.1" 200 4968 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 94.26.106.239 - - [04/Jun/2026:21:11:55 +0000] "POST /wp-login.php HTTP/1.1" 200 4968 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 94.26.106.239 - - [04/Jun/2026:21:11:55 +0000] "POST /wp-login.php HTTP/1.1" 200 4968 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Fir show less	Brute-Force
🇬🇧 AvonleaConsulting	2026-07-24 22:50:18 (3 weeks ago)	Attempts to probe web pages for vulnerable PHP or other applications	Web App Attack
🇩🇪 fleckenbase	2026-07-24 08:55:27 (3 weeks ago)	apache-noscript ...	Brute-Force Web App Attack
🇺🇸 Vano Ganzzz	2026-07-24 07:13:13 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 197170 (TechTies Inc.) P ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 197170 (TechTies Inc.) Protocol: HTTP/1.1 (HEAD method) Endpoint: /wp-json/ Timestamp: 2026-07-24T07:13:13Z Ray ID: a2011ef8e825a63e UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36 show less	Bad Web Bot
🇧🇪 boxed-it	2026-07-24 07:12:53 (3 weeks ago)	GET /wp-login.php (Tarpitted for 22m48s, wasted 80.27kB)	Web App Attack
🇪🇸 antivoid.xyz	2026-07-24 06:36:52 (3 weeks ago)		Brute-Force Web App Attack
🇬🇧 AvonleaConsulting	2026-07-24 06:02:27 (3 weeks ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-07-24 04:32:51 (3 weeks ago)	Many_bad_calls	Web App Attack
🇮🇹 eliosbrocchi	2026-07-24 02:17:41 (3 weeks ago)	[Fri Jul 24 04:17:37.457715 2026] [proxy_fcgi:error] [pid 287366:tid 287451] [client 94.26.106.239:5 ... show more [Fri Jul 24 04:17:37.457715 2026] [proxy_fcgi:error] [pid 287366:tid 287451] [client 94.26.106.239:51112] AH01071: Got error 'Primary script unknown' [Fri Jul 24 04:17:37.584298 2026] [proxy_fcgi:error] [pid 287365:tid 287460] [client 94.26.106.239:51342] AH01071: Got error 'Primary script unknown', referer: http://coppermine.crislio.com/wp-login.php [Fri Jul 24 04:17:37.457803 2026] [proxy_fcgi:error] [pid 287366:tid 287437] [client 94.26.106.239:51244] AH01071: Got error 'Primary script unknown' [Fri Jul 24 04:17:37.605469 2026] [proxy_fcgi:error] [pid 287365:tid 287426] [client 94.26.106.239:51334] AH01071: Got error 'Primary script unknown', referer: http://servermet.crislio.com/wp-login.php [Fri Jul 24 04:17:37.457819 2026] [proxy_fcgi:error] [pid 287366:tid 287447] [client 94.26.106.239:51222] AH01071: Got error 'Primary script unknown' ... show less	VPN IP
🇫🇷 ✨	2026-07-24 01:23:16 (3 weeks ago)	Domain : ebaytoken.gingerfox.co.uk Rule : wp-login 2026-07-24 01:20:26 *hidden-privacy* GET /wp- ... show more Domain : ebaytoken.gingerfox.co.uk Rule : wp-login 2026-07-24 01:20:26 *hidden-privacy* GET /wp-admin/ - 443 - 94.26.106.239 HTTP/1.1 Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36 http://ebaytoken.gingerfox.co.uk/wp-admin/ ebaytoken.gingerfox.co.uk 404 0 64 341 749 27 - - show less	Exploited Host Web App Attack
🇨🇭 dalslab ltd	2026-07-24 01:03:24 (3 weeks ago)	[24/Jul/2026:03:03:23 +0200] - 404 404 - GET https search.dalslab.com "/wp-login.php" [Client 94.26. ... show more [24/Jul/2026:03:03:23 +0200] - 404 404 - GET https search.dalslab.com "/wp-login.php" [Client 94.26.106.239] [Length 2217] [Gzip 2.15] [Sent-to 10.1.1.41] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" "-" [24/Jul/2026:03:03:23 +0200] - 404 404 - GET https search.dalslab.com "/wp-login.php" [Client 94.26.106.239] [Length 2305] [Gzip 2.10] [Sent-to 10.1.1.41] "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/119.0.1" "http://search.dalslab.com/wp-login.php" [24/Jul/2026:03:03:23 +0200] - 404 404 - GET https search.dalslab.com "/wp-admin/" [Client 94.26.106.239] [Length 2217] [Gzip 2.15] [Sent-to 10.1.1.41] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/121.0" "-" [24/Jul/2026:03:03:23 +0200] - 404 404 - GET https search.dalslab.com "/wp-admin/" [Client 94.26.106.239] [Length 2489] [Gzip 2.05] [Sent-to 10.1.1.41] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/118.0.2" "http: ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇪🇸 alferez	2026-07-23 22:29:22 (3 weeks ago)	Multiple WP Login Attack	Hacking Exploited Host Web App Attack
🇬🇧 consul.to	2026-07-23 22:10:43 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 bogdanv	2026-07-23 13:37:03 (3 weeks ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-07-23 13:32:12 (3 weeks ago)	Bad_requests	Bad Web Bot

Showing 1 to 15 of 414 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 97.74.87.152

🇱🇹 213.176.26.123

🇲🇽 187.222.69.11

🇨🇭 172.161.79.158

🇳🇬 154.120.89.81

🇫🇷 85.217.140.19

🇳🇱 45.148.10.183

🇵🇰 39.34.167.117

🇭🇰 20.24.67.246

🇧🇷 179.48.229.117

🇺🇸 172.245.213.201

🇺🇸 159.223.175.198

🇪🇬 154.177.108.44

🇺🇸 104.237.156.209

🇷🇺 90.151.171.109

🇱🇹 62.60.130.148

🇨🇳 36.106.167.216

🇺🇸 20.65.69.59

🇱🇹 213.176.26.182

🇱🇹 213.176.26.134