94.26.106.149

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
32 reports
29 reporters · latest 1 hour ago
ISP
TechTies Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS197170
Domain Name
tech-ties.net
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
32 from 29 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇫🇷 France 4 🇺🇸 United States of America 4
Most common categories Web App Attack 23 Brute-Force 15 Bad Web Bot 8 Port Scan 4 Hacking 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Pay by Jag firewall blocked WordPress probes from this address against protected websites.
Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au
stkildashule.org.au:443 94.26.106.149 - - [15/Nov/2026:07:04:49 +1100] "GET /?author=10 HTTP/1.1" 404 53431 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" ...
Web App Attack
🇦🇺 paulshipley.com.au
levellapromotions.com.au:443 94.26.106.149 - - [15/Nov/2026:04:03:21 +1100] "GET /?author=10 HTTP/1.1" 404 143080 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" ...
Web App Attack
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇫🇷 Kenshin869
Wordpress unauthorized access attempt
Brute-Force
🇳🇱 BlueWire Hosting
Probing websites for vulnerabilities
Web App Attack SQL Injection
🇩🇪 Lino Project
94.26.106.149 - - [14/Nov/2026:12:25:23 +0100] "GET /xmlrpc.php HTTP/1.1" 302 425 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ...
Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server
Hacking Web App Attack
🇬🇧 cg-design.co.uk
(wordpress-user-enum) Failed wordpress-user-enum trigger from 94.26.106.149 (DE/Germany/-)
Brute-Force
🇧🇪 voormedia
Accessed trap at '/xmlrpc.php'
Web App Attack
🇧🇷 Host One
Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Automated report.
Brute-Force Web App Attack
Anonymous
94.26.106.149 - - [14/Nov/2026:11:20:33 +0800] "GET /xmlrpc.php HTTP/1.1" 301 243 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" ...
Bad Web Bot Web App Attack
🇺🇸 ambor
Honeypot access: WordPress XML-RPC attack attempt. Path: /xmlrpc.php
Brute-Force Web App Attack
🇮🇱 Dolphi
Excessive POST /xmlrpc.php requests
Brute-Force Web App Attack
🇺🇸 Epimetheus
Unauthorized access attempts: [GET] /xmlrpc.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 125.138.175.113
🇩🇪 69.5.169.76
🇳🇱 213.209.159.210
🇺🇸 207.180.11.153
🇬🇧 193.138.195.233
🇳🇱 193.47.62.94
🇺🇸 165.227.23.23
🇧🇼 153.67.129.202
🇩🇪 69.5.169.75
🇩🇪 69.5.169.71
🇨🇳 47.121.135.209
🇨🇿 31.222.12.89
🇺🇸 13.219.1.233
🇺🇸 216.25.89.143
🇮🇩 202.158.36.50
🇿🇼 197.221.232.44
🇬🇧 195.96.139.40
🇧🇷 191.53.40.73
🇧🇷 187.120.76.56
🇺🇸 143.198.225.197
feedback