JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.26.112.59

159.26.112.59 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 22%: ?

22%

ISP	PV-SL-HOSTED-Marseille-Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208172
Domain Name	ip.me
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.26.112.59

Whois 159.26.112.59

IP Abuse Reports for 159.26.112.59:

This IP address has been reported a total of 15 times from 5 distinct sources. 159.26.112.59 was first reported on September 30th 2025, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 SOC PR	2026-06-18 09:14:14 (22 hours ago)	IPS: Sensitive Configuration File Disclosure.	Hacking
🇺🇸 TPI-Abuse	2026-06-18 08:56:53 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 159.26.112.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 159.26.112.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 04:56:50.875074 2026] [security2:error] [pid 25191:tid 25220] [client 159.26.112.59:59486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.124"] [uri "/.env"] [unique_id "ajOy0hEaxOVlXnrVHtUOAgAAANg"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 UMP-PL	2026-06-18 08:37:32 (23 hours ago)	Webserver scan (backups, phpadmin, etc.)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 08:31:26 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 159.26.112.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 159.26.112.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 04:31:18.551990 2026] [security2:error] [pid 12792:tid 12792] [client 159.26.112.59:51944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.11"] [uri "/.env"] [unique_id "ajOs1gzgL-R3NTM88GOi0gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 marzzzello	2025-12-20 03:50:59 (5 months ago)	Ports: 14x 47997, 7x 29219	Port Scan
🇩🇪 marzzzello	2025-12-20 00:53:45 (5 months ago)	Ports: 21x 47997	Port Scan
🇩🇪 marzzzello	2025-12-18 03:53:51 (6 months ago)	Ports: 21x 47997	Port Scan
🇩🇪 marzzzello	2025-12-17 06:52:41 (6 months ago)	Ports: 28x 47997	Port Scan
🇩🇪 marzzzello	2025-12-17 04:01:29 (6 months ago)	Ports: 35x 47997	Port Scan
🇩🇪 marzzzello	2025-12-17 03:03:58 (6 months ago)	Ports: 21x 47997	Port Scan
🇺🇸 xmission.com	2025-11-18 03:36:04 (7 months ago)	Blocked by UFW (TCP on 60212) Source port: 1101 TTL: 47 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 60212) Source port: 1101 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 159.26.112.59) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-11-17 01:02:44 (7 months ago)	Blocked by UFW (TCP on 60212) Source port: 47597 TTL: 50 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 60212) Source port: 47597 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 159.26.112.59) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-11-16 10:11:04 (7 months ago)	Blocked by UFW (TCP on 60212) Source port: 25956 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 60212) Source port: 25956 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 159.26.112.59) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-11-15 22:09:24 (7 months ago)	Blocked by UFW (TCP on 60212) Source port: 4955 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 60212) Source port: 4955 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 159.26.112.59) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-09-30 20:30:44 (8 months ago)	Blocked by UFW (TCP on 55695) Source port: 12262 TTL: 51 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 55695) Source port: 12262 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 159.26.112.59) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 182.252.81.32

🇺🇸 199.127.62.250

🇳🇱 195.178.110.30

🇩🇪 128.1.123.145

🇸🇬 47.128.30.7

🇬🇧 35.203.211.135

🇨🇳 14.103.74.80

🇯🇵 152.32.202.250

🇺🇸 147.185.132.161

🇫🇷 85.217.140.37

🇺🇸 64.62.156.29

🇲🇽 201.103.215.91

🇫🇷 172.68.234.235

🇩🇪 167.94.146.47

🇫🇮 147.185.133.26

🇸🇬 101.47.156.21

🇺🇸 91.230.168.17

🇳🇱 91.92.40.151

🇬🇧 2a06:4880:c000::f4

🇺🇸 2600:3c00::f03c:91ff:fe4c:7fb0