2.26.252.144
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Kyonix Hosting - kyonix.com
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS210457
- Hostname(s)
- kyonix.com
- Domain Name
- kyonix.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
64 from
61 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 mw |
Web App Attack
|
Web App Attack | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Hacking, Brute-Force. Last observed 2026-11-12 UTC.
|
Hacking Brute-Force | |
| 🇩🇪 Holger |
URL probing: GET /trading/.env
|
Web App Attack | |
| 🇷🇴 gtheo99 |
(CT) IP 2.26.252.144 (DE/Germany/kyonix.com) found to have 101 connections
|
Port Scan | |
| 🇺🇸 bruce_buskill |
Web exploit/scan attempts against a university web server; blocked.
|
Web App Attack Hacking | |
| Anonymous |
Aggressive web scan
|
Web App Attack | |
| 🇬🇧 dwmosaics |
"GET /.env.ci HTTP/1.1" 404 5941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; ...
|
Brute-Force Web App Attack | |
| 🇬🇧 Shadymint |
url probing from IP marked as abusive
|
Web App Attack | |
| Anonymous |
2.26.252.144 - - [12/Nov/2026:06:04:14 +0100] "GET /.development.env HTTP/1.1" 402 810 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" ...
|
Web App Attack | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| Anonymous |
|
Brute-Force Web App Attack | |
| Anonymous |
Attempted access to sensitive endpoint (/.env.azure) detected. Automated scan or unauthorized probing.
|
Web App Attack | |
| 🇫🇷 Selckie |
fail2ban: NGINX unusual impact
|
Web App Attack | |
| 🇨🇦 danieljamesbertrand |
fail2ban jail=scanner-permanent on canadapaywall.com (automatic report; categories 19,21)
|
Bad Web Bot Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 779 application-level events across 2 target ports and 258 source port(s). Ports: 443/HTTPS, 80/HTTP. Sensors: H0neytr4p, Tanner.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown