JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

94.26.106.220

Recent Activity

Abuse Confidence Score

100% Critical

171 reports

127 reporters · latest 2 hours ago

ISP: TechTies Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS197170
Domain Name: tech-ties.net
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

171 from 127 distinct reporters

First reported

March 24th 2026

Most recent report

2 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 47 🇫🇷 France 27 🇩🇪 Germany 25

Most common categories Port Scan 121 Brute-Force 75 Hacking 50 IoT Targeted 34 SSH 19

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Da_tschek	2026-11-11 19:48:23 UTC · (2 hours ago)	Port scanning	Port Scan Hacking
🇪🇸 whatda	2026-11-11 18:13:02 UTC · (3 hours ago)	TELNET unauthorized access: "enable"	IoT Targeted Brute-Force
🇨🇭 GAS	2026-11-11 17:37:10 UTC · (4 hours ago)	Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 94.26.106.220; usernames=["ubnt" "admin" "adminttd" "root" "tech" "default"]; passwords sha1 prefix=["b5e701c9" "1a9b9508" "407f5ce9" "58ff879c" "1b10fe8c" "c95ee47 ... show more Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 94.26.106.220; usernames=["ubnt" "admin" "adminttd" "root" "tech" "default"]; passwords sha1 prefix=["b5e701c9" "1a9b9508" "407f5ce9" "58ff879c" "1b10fe8c" "c95ee476" "317f1e76" "cde189cb" "12dea96f" "404865ca" "70352f41" "7110eda4" "8cb2237d" "03ec7cd0"] show less	Port Scan Brute-Force IoT Targeted
🇧🇷 radardatelecom	2026-11-11 16:55:04 UTC · (5 hours ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇹🇷 oalver	2026-11-11 15:52:46 UTC · (6 hours ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet. Sources: honeypot. First seen: 2026-11-11. Risk score: 100/100.	Brute-Force IoT Targeted
🇨🇭 GAS	2026-11-11 15:11:37 UTC · (6 hours ago)	SSH aggressive port ping. {"abuseConfidenceScore":100,"countryCode":"DE","destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"24360","src":"94.26.106.220","time ... show more SSH aggressive port ping. {"abuseConfidenceScore":100,"countryCode":"DE","destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"24360","src":"94.26.106.220","time":"2026-11-11T14:35:39Z","totalReports":154} {"abuseConfidenceScore":100,"countryCode":"DE","destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"42986","src":"94.26.106.220","time":"2026-11-11T14:39:15Z","totalReports":154} {"abuseConfidenceScore":100,"countryCode":"DE","destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"42986","src":"94.26.106.220","time":"2026-11-11T14:39:15Z","totalReports":154} {"abuseConfidenceScore":100,"countryCode":"DE","destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt ... show less	Brute-Force Port Scan
🇨🇭 GAS	2026-11-11 14:50:04 UTC · (7 hours ago)	Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 94.26.106.220; usernames=["Admin" "User" "Guest" "root" "admin" "888888" "666666"]; passwords sha1 prefix=["5d7eaab7" "12dea96f" "35675e68" "9db20627" "5baa61e4" "2 ... show more Telnet authentication brute-force attempt against GAS85/ssh-auth-logger honeypot from 94.26.106.220; usernames=["Admin" "User" "Guest" "root" "admin" "888888" "666666"]; passwords sha1 prefix=["5d7eaab7" "12dea96f" "35675e68" "9db20627" "5baa61e4" "2ea6201a" "cf21d858" "d5f12e53" "1f82c942" "1411678a"] show less	Port Scan Brute-Force IoT Targeted
🇩🇪 EnthecSolutions	2026-11-11 14:01:07 UTC · (8 hours ago)	Detected by Enthec Solutions. \| Attempts: 118 in 24h \| Target port: 23	Brute-Force SSH
🇨🇭 GAS	2026-11-11 13:34:47 UTC · (8 hours ago)	SSH aggressive port ping. {"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"51230","src":"94.26.106.220","time":"2026-11-11T10:26:34Z"} {"abuseConfidenceSco ... show more SSH aggressive port ping. {"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"51230","src":"94.26.106.220","time":"2026-11-11T10:26:34Z"} {"abuseConfidenceScore":100,"countryCode":"DE","destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"46476","src":"94.26.106.220","time":"2026-11-11T12:22:40Z","totalReports":113} {"abuseConfidenceScore":100,"countryCode":"DE","destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"64572","src":"94.26.106.220","time":"2026-11-11T12:26:22Z","totalReports":113} {"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"30996","src":"94.26.106.220","time":"2026-11-11T12:29:58Z"} {"abuseConfidenceScore":100,"countryCode":"DE"," ... show less	Brute-Force Port Scan
🇯🇵 xamb	2026-11-11 13:23:07 UTC · (8 hours ago)	Honeypot: 18 Telnet login attempt(s).	Brute-Force IoT Targeted
🇩🇪 slibus	2026-11-11 13:23:05 UTC · (8 hours ago)	SSH/Telnet honeypot (Cowrie): 6 login attempts (users: administrator, root, NetLinx, __hapf_canary_9f3a__), 5 shell commands after login	Brute-Force SSH Hacking IoT Targeted
🇨🇦 Sakusen	2026-11-11 13:16:24 UTC · (8 hours ago)	Telnet (TCP/23): 16 login attempts, 10 distinct usernames, 13 distinct passwords	Brute-Force
🇺🇸 Vexedly	2026-11-11 13:15:09 UTC · (8 hours ago)	SSH brute-force against an SSH honeypot: 10 credential attempt(s) across 10 logged events. Automated report from a Cowrie sensor.	Brute-Force SSH
🇺🇸 wk5h	2026-11-11 13:05:03 UTC · (9 hours ago)	Honeypot (T-Pot), last 24h: 34 hits, 5 login attempts, logged in to fake shell and ran commands. Services: Cowrie.	Hacking Brute-Force SSH
🇳🇱 jacobrakai.org	2026-11-11 13:05:03 UTC · (9 hours ago)	Honeypot: 14 brute-force attempts via TELNET	Brute-Force

Showing 1 to 15 of 171 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇾 143.202.208.242

🇫🇷 82.127.61.116

🇨🇳 60.188.112.158

🇯🇵 20.78.136.78

🇳🇱 195.178.110.26

🇨🇳 113.24.225.213

🇨🇳 113.24.225.183

🇳🇱 109.160.32.116

🇺🇦 95.215.218.163

🇷🇴 80.94.95.115

🇺🇸 38.141.252.55

🇮🇳 34.180.62.163

🇺🇸 20.84.74.250

🇹🇼 219.70.241.11

🇳🇱 213.209.159.108

🇨🇱 200.114.64.254

🇺🇦 195.162.88.161

🇰🇿 93.170.213.48

🇺🇸 91.230.168.38

🇳🇱 45.148.10.152