JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.26.86.206

37.26.86.206 was found in our database!

This IP was reported 329 times. Confidence of Abuse is 14%: ?

14%

ISP	ATU Network
Usage Type	Fixed Line ISP
ASN	AS198279
Domain Name	atu.al
Country	🇦🇱 Albania
City	Durres, Durres County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.26.86.206

Whois 37.26.86.206

IP Abuse Reports for 37.26.86.206:

This IP address has been reported a total of 329 times from 137 distinct sources. 37.26.86.206 was first reported on November 22nd 2020, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 leithzz	2026-05-31 18:15:37 (1 month ago)	Report by Cloudflare.Time: 2026-05-31T18:15:10Z	DDoS Attack
🇨🇦 leithzz	2026-05-30 16:52:34 (1 month ago)	Report by Cloudflare.Time: 2026-05-30T16:51:58Z	DDoS Attack
🇫🇷 MatStef132	2026-05-22 14:04:41 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇸🇬 volcaryx	2026-05-17 04:30:02 (1 month ago)	Cloudflare detected an L7 DDoS attack (l7ddos) from AL. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 ... show more Cloudflare detected an L7 DDoS attack (l7ddos) from AL. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.4464.0 Safari/537.36 OPR/92.0.0.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇳🇱 ByeByte API	2026-05-16 19:49:50 (1 month ago)	byebyte.space auth: Rate-limit escalation at 2026-05-16T19:49:50Z: 5 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-16T19:49:50Z: 5 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 15_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/18.0'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="126", "Chromium";v="126", "Not.A/Brand";v="24"'. Platform: "macOS" (mobile=?0). Country (CF): AL. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇳🇱 ByeByte API	2026-05-16 18:35:37 (1 month ago)	byebyte.space auth: Rate-limit escalation at 2026-05-16T18:35:36Z: 8 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-16T18:35:36Z: 8 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/605.1.33 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/17.3'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="121", "Chromium";v="121", "Not.A/Brand";v="24"'. Platform: "Linux" (mobile=?0). Referer: 'https://google.com/'. Country (CF): AL. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:15:53 (2 months ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇮🇹 VHosting	2026-04-26 08:43:11 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 GunsawianHosting	2026-03-12 17:08:57 (4 months ago)	Open Proxy	Open Proxy
🇵🇱 cheatmaster.store	2026-02-25 23:21:47 (4 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Albania Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇳🇱 ConsulHosting	2026-02-15 15:26:17 (4 months ago)	Part of an HTTP Flood DDoS attack and had sent at least 109 requests.	DDoS Attack Exploited Host
🇨🇭 Modules	2026-01-20 19:31:13 (5 months ago)	Open proxy http://37.26.86.206:47464 (RT:24990ms,Loc:Albania,ASN:AS198279)	Open Proxy
🇪🇸 cuscusero (FlexBacks, FlexChar, FlexAve, FlexCDNM, FlexTudy, ColdHosting SL)	2026-01-16 01:06:09 (5 months ago)	[CPD ESP-BCN02-FW11-394] Suspicious connection detected on port 21. DDoS detected	DDoS Attack FTP Brute-Force Brute-Force
🇨🇦 1gz	2025-12-30 13:59:10 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from AL. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpo ... show more Triggered Cloudflare WAF (l7ddos) from AL. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:51.0) Gecko/20100101 Firefox/51.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇮🇹 VHosting	2025-12-23 19:29:45 (6 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force

Showing 1 to 15 of 329 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.138

🇬🇧 165.154.129.74

🇳🇿 103.14.69.13

🇬🇧 35.203.210.40

🇺🇸 162.216.149.246

🇨🇦 139.177.196.169

🇰🇷 121.178.185.141

🇮🇩 103.190.214.241

🇺🇸 76.142.130.51

🇺🇸 69.73.187.130

🇺🇸 66.132.195.53

🇺🇸 45.131.194.129

🇺🇸 198.12.254.228

🇳🇱 195.178.110.30

🇨🇳 159.75.70.225

🇺🇸 107.175.222.235

🇨🇳 58.222.72.182

🇳🇱 45.153.34.161

🇲🇽 187.216.224.85

🇧🇷 181.224.3.170