JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.26.245.229

5.26.245.229 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 23%: ?

23%

ISP	TURKCELL INTERNET
Usage Type	Fixed Line ISP
ASN	AS16135
Domain Name	turkcell.com.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.26.245.229

Whois 5.26.245.229

IP Abuse Reports for 5.26.245.229:

This IP address has been reported a total of 10 times from 8 distinct sources. 5.26.245.229 was first reported on February 21st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-10-22 04:14:52 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 14:12:48 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 5.26.245.229 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 5.26.245.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:12:43.692555 2026] [security2:error] [pid 19279:tid 19279] [client 5.26.245.229:59636] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.mkdesignndetailing.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mkdesignndetailing.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "atIw25AER4oRtm85jhZ7GwAAAAI"], referer: https://www.mkdesignndetailing.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇰 powerhostingdk	2026-09-07 19:13:47 (1 month ago)	[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report ... show more [mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report. show less	Brute-Force
🇩🇪 EGP Abuse Dept	2026-09-04 06:18:30 (1 month ago)	Scanning for web/db/file exploits on hollandfilmnieuws.nl	SQL Injection Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 22:33:29 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 5.26.245.229 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 5.26.245.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 18:33:24.915096 2026] [security2:error] [pid 1137024:tid 1137024] [client 5.26.245.229:50532] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cygnetsilks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cygnetsilks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "am0itCU-FXhnWUIMNxuoogAAAHY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-20 06:06:02 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇪🇸 pipeline.es	2026-07-03 08:45:36 (3 months ago)	SMTP AUTH credential-stuffing/brute-force against a compromised mailbox account on our Postfix mail ... show more SMTP AUTH credential-stuffing/brute-force against a compromised mailbox account on our Postfix mail infrastructure (pipeline.es), used to relay spam via authenticated SMTP submission. show less	Brute-Force Email Spam Hacking
🇮🇹 VHosting	2026-05-27 17:27:18 (4 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇮🇩 Burayot	2026-05-16 01:23:26 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 5.26.245.229 (TR/Türkiye/-): 2 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 5.26.245.229 (TR/Türkiye/-): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 xveil	2026-02-21 11:43:06 (8 months ago)	2026-02-21T18:43:04.291578 mail-honeypot postfix/submission/smtpd[24714]: warning: unknown[5.26.245. ... show more 2026-02-21T18:43:04.291578 mail-honeypot postfix/submission/smtpd[24714]: warning: unknown[5.26.245.229]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 185.132.230.56

🇺🇸 172.87.4.241

🇵🇰 103.157.200.43

🇿🇦 41.198.155.44

🇬🇧 35.203.210.22

🇺🇸 3.86.114.186

🇳🇱 204.76.203.43

🇲🇽 187.174.238.116

🇬🇧 185.230.216.5

🇧🇷 177.234.190.90

🇹🇷 176.236.127.114

🇺🇸 142.93.90.204

🇻🇳 117.5.152.147

🇯🇵 107.155.15.8

🇫🇷 85.217.140.36

🇬🇧 51.195.215.115

🇮🇳 49.156.83.223

🇸🇬 43.172.198.120

🇨🇳 222.90.142.243

🇳🇱 213.177.179.109