IP address
Shodan(more info)

Passive DNS

Tags:
- IP blacklists
- AbuseIPDB94.26.106.216 is listed on the AbuseIPDB blacklist.Spamhaus SBL
Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)
Last checked at: 2026-06-27 04:00:00.607000
Was present on blacklist at: 2026-06-02 04:00, 2026-06-07 04:00, 2026-06-09 04:00, 2026-06-11 04:00, 2026-06-20 04:00, 2026-06-24 04:00, 2026-06-25 04:00, 2026-06-26 04:00, 2026-06-27 04:0094.26.106.216 is listed on the Spamhaus SBL blacklist.Spamhaus DROP
Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-06-23 04:00:21.089000
Was present on blacklist at: 2026-06-02 04:00, 2026-06-09 04:00, 2026-06-16 07:12, 2026-06-23 04:0094.26.106.216 is listed on the Spamhaus DROP blacklist.blocklist.de web-login
Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-06-23 04:00:21.089000
Was present on blacklist at: 2026-06-02 04:00, 2026-06-09 04:00, 2026-06-16 07:12, 2026-06-23 04:0094.26.106.216 is listed on the blocklist.de web-login blacklist.blocklist.de Apache
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and<br>other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)
Last checked at: 2026-06-25 22:05:05.146000
Was present on blacklist at: 2026-06-02 04:05, 2026-06-02 10:05, 2026-06-02 16:05, 2026-06-02 22:05, 2026-06-03 04:05, 2026-06-03 10:05, 2026-06-03 16:05, 2026-06-03 22:05, 2026-06-04 04:05, 2026-06-04 10:05, 2026-06-04 16:05, 2026-06-06 04:05, 2026-06-06 10:05, 2026-06-06 16:05, 2026-06-06 22:05, 2026-06-07 04:05, 2026-06-07 10:05, 2026-06-07 16:05, 2026-06-07 22:05, 2026-06-08 04:05, 2026-06-08 10:05, 2026-06-08 16:05, 2026-06-08 22:05, 2026-06-13 22:05, 2026-06-14 04:05, 2026-06-14 10:05, 2026-06-14 16:05, 2026-06-14 22:05, 2026-06-15 04:05, 2026-06-15 10:05, 2026-06-15 16:05, 2026-06-15 22:05, 2026-06-16 10:05, 2026-06-16 16:05, 2026-06-16 22:05, 2026-06-17 04:05, 2026-06-17 10:05, 2026-06-17 16:05, 2026-06-22 10:05, 2026-06-22 16:05, 2026-06-22 22:05, 2026-06-23 04:05, 2026-06-23 10:05, 2026-06-23 16:05, 2026-06-23 22:05, 2026-06-24 04:05, 2026-06-24 10:05, 2026-06-24 16:05, 2026-06-24 22:05, 2026-06-25 04:05, 2026-06-25 10:05, 2026-06-25 16:05, 2026-06-25 22:0594.26.106.216 is listed on the blocklist.de Apache blacklist.
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the service<br>Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)
Last checked at: 2026-06-25 22:05:05.282000
Was present on blacklist at: 2026-06-02 04:05, 2026-06-02 10:05, 2026-06-02 16:05, 2026-06-02 22:05, 2026-06-03 04:05, 2026-06-03 10:05, 2026-06-03 16:05, 2026-06-03 22:05, 2026-06-04 04:05, 2026-06-04 10:05, 2026-06-04 16:05, 2026-06-06 04:05, 2026-06-06 10:05, 2026-06-06 16:05, 2026-06-06 22:05, 2026-06-07 04:05, 2026-06-07 10:05, 2026-06-07 16:05, 2026-06-07 22:05, 2026-06-08 04:05, 2026-06-08 10:05, 2026-06-08 16:05, 2026-06-08 22:05, 2026-06-13 22:05, 2026-06-14 04:05, 2026-06-14 10:05, 2026-06-14 16:05, 2026-06-14 22:05, 2026-06-15 04:05, 2026-06-15 10:05, 2026-06-15 16:05, 2026-06-15 22:05, 2026-06-16 10:05, 2026-06-16 16:05, 2026-06-16 22:05, 2026-06-17 04:05, 2026-06-17 10:05, 2026-06-17 16:05, 2026-06-17 22:05, 2026-06-22 10:05, 2026-06-22 16:05, 2026-06-22 22:05, 2026-06-23 04:05, 2026-06-23 10:05, 2026-06-23 16:05, 2026-06-23 22:05, 2026-06-24 04:05, 2026-06-24 10:05, 2026-06-24 16:05, 2026-06-24 22:05, 2026-06-25 04:05, 2026-06-25 10:05, 2026-06-25 16:05, 2026-06-25 22:05
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 46 | src | login | |
| 38 | src | — |
- Origin AS
- AS215607 - DF-Transit
- AS197170 - TECHTIES-AS
- BGP Prefix
- 94.26.106.0/24
- geo
- Germany, Kriftel
- 🕑 Europe/Berlin
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 94.26.104.0 - 94.26.107.255
- rep
- 0.0
- reserved_range
- 0
- ts_added
- 2026-06-02 04:00:15.978000
- ts_last_update
- 2026-06-29 04:00:20.163000
Warden event timeline
DShield event timeline
Presence on blacklists

