JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.26.104.32

159.26.104.32 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 11%: ?

11%

ISP	PV-SL-HOSTED-Frankfurt-Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208172
Domain Name	ip.me
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.26.104.32

Whois 159.26.104.32

IP Abuse Reports for 159.26.104.32:

This IP address has been reported a total of 16 times from 12 distinct sources. 159.26.104.32 was first reported on December 24th 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 pengpeng	2026-08-24 03:02:09 (11 hours ago)	monitor: on VM-0-7-ubuntu \| port: 59379 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 59379 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 matthieul.dev	2026-07-13 18:30:24 (1 month ago)	Blocked by os-abuseipdb; 14 hits, proto=tcp, ports=60274	Port Scan Brute-Force
🇮🇹 VHosting	2026-04-26 12:23:07 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇫🇮 Ticlem	2026-04-14 09:42:27 (4 months ago)	2026-04-14T11:12:27.120330+02:00 clement-turlure kernel: [ 9229.385082] [UFW BLOCK] IN=enp0s31f6 OUT ... show more 2026-04-14T11:12:27.120330+02:00 clement-turlure kernel: [ 9229.385082] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=159.26.104.32 DST=95.216.21.136 LEN=143 TOS=0x00 PREC=0x00 TTL=57 ID=26285 PROTO=UDP SPT=37692 DPT=6881 LEN=123 2026-04-14T11:27:27.082528+02:00 clement-turlure kernel: [10129.356724] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=159.26.104.32 DST=95.216.21.136 LEN=143 TOS=0x00 PREC=0x00 TTL=57 ID=20540 PROTO=UDP SPT=14341 DPT=6881 LEN=123 2026-04-14T11:42:27.132933+02:00 clement-turlure kernel: [11029.416627] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=159.26.104.32 DST=95.216.21.136 LEN=143 TOS=0x00 PREC=0x00 TTL=57 ID=12608 PROTO=UDP SPT=52521 DPT=6881 LEN=123 ... show less	Port Scan
🇺🇸 xmission.com	2026-03-24 20:18:28 (4 months ago)	Blocked by UFW (TCP on 59732) Source port: 59204 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 59732) Source port: 59204 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 159.26.104.32) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-23 20:19:48 (5 months ago)	Blocked by UFW (TCP on 59732) Source port: 22956 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 59732) Source port: 22956 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 159.26.104.32) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-03-04 22:17:45 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 159.26.104.32 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 159.26.104.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 17:17:38.324422 2026] [security2:error] [pid 11301:tid 11301] [client 159.26.104.32:50997] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "aaivghS-Wl_PJW9W4ZB6agAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-03-04 11:39:28 (5 months ago)	Blocked by UFW (TCP on 31048) Source port: 24220 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 31048) Source port: 24220 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 159.26.104.32) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-02-05 10:52:08 (6 months ago)	Blocked by UFW (TCP on 1) Source port: 5197 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 15 ... show more Blocked by UFW (TCP on 1) Source port: 5197 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 159.26.104.32) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇺 Agrohim	2026-01-30 00:11:32 (6 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇺🇸 myagent.site	2025-12-25 09:21:49 (7 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇳🇱 i-turnradio.nl	2025-12-25 08:33:58 (7 months ago)	2025-12-25 @ 09:33:58 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
🇧🇾 lns.bz	2025-12-25 05:46:01 (7 months ago)	.env scanning [BY]	Web App Attack
Anonymous	2025-12-25 05:10:01 (7 months ago)	suspicious request in access.log	Web App Attack
🇧🇪 cmbplf	2025-12-25 01:29:38 (7 months ago)	171 requests with url.path *.env	Brute-Force Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:4f8:1c16:5b::1

🇩🇪 194.147.95.79

🇬🇾 190.97.102.122

🇧🇴 181.188.148.74

🇵🇰 103.73.101.56

🇷🇺 62.148.137.18

🇮🇳 49.205.214.47

🇩🇪 18.193.117.183

🇱🇹 213.176.26.194

🇳🇱 195.178.110.137

🇨🇳 183.210.24.185

🇦🇱 130.12.209.156

🇨🇳 117.50.192.5

🇮🇳 103.254.172.165

🇧🇩 103.172.29.63

🇮🇩 103.155.199.88

🇸🇬 94.231.206.159

🇬🇪 94.43.158.230

🇺🇸 34.138.207.53

🇺🇸 2607:f8b0:400c:c16::129