JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.26.114.22

159.26.114.22 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 53%: ?

53%

ISP	PV-SL-HOSTED-Copenhagen-Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208172
Domain Name	ip.me
Country	🇩🇰 Denmark
City	Copenhagen, Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.26.114.22

Whois 159.26.114.22

IP Abuse Reports for 159.26.114.22:

This IP address has been reported a total of 30 times from 15 distinct sources. 159.26.114.22 was first reported on October 31st 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 IndigoRidge	2026-10-17 15:32:29 (3 hours ago)	159.26.114.22 - - [17/Oct/2026:11:32:26 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5330 "-" "Mozilla/5.0 ... show more 159.26.114.22 - - [17/Oct/2026:11:32:26 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 159.26.114.22 - - [17/Oct/2026:11:32:26 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 159.26.114.22 - - [17/Oct/2026:11:32:26 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 159.26.114.22 - - [17/Oct/2026:11:32:26 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 159.26.114.22 - - [17/Oct/2026:11:32:26 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safar ... show less	Web App Attack
🇹🇷 ycoskun41	2026-10-17 13:28:23 (5 hours ago)	Web attack blocked by WAF: GET / x4 (Track WordPress users enumeration). [17/Oct/2026:16:28:19 +0300 ... show more Web attack blocked by WAF: GET / x4 (Track WordPress users enumeration). [17/Oct/2026:16:28:19 +0300] "GET /?author=1 HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Track WordPress users enumeration [17/Oct/2026:16:28:21 +0300] "GET /?author=2 HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Track WordPress users enumeration [17/Oct/2026:16:28:22 +0300] "GET /?author=3 HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Track WordPress users enumeration [17/Oct/2026:16:28:22 +0300] "GET /?author=4 HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Track WordPress users enumeration show less	Web App Attack
🇫🇷 debaba	2026-10-14 11:21:46 (3 days ago)	aktiv 159.26.114.22 - - [14/Oct/2026:11:21:45 +0000] "POST /wp-login.php HTTP/1.1" 200 17327 "-" "Mo ... show more aktiv 159.26.114.22 - - [14/Oct/2026:11:21:45 +0000] "POST /wp-login.php HTTP/1.1" 200 17327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ... show less	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-10-13 20:05:36 (3 days ago)	[13/Oct/2026:23:05:36 +0300] -- 159.26.114.22 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-l ... show more [13/Oct/2026:23:05:36 +0300] -- 159.26.114.22 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇫🇷 ap_ram	2026-10-13 20:04:40 (3 days ago)	mae-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
Anonymous	2026-10-13 11:48:10 (4 days ago)	[osotir.org] httpd-suspicious-path: sites=www.prostiniki.gr; logs=/var/log/httpd/domains/prostiniki. ... show more [osotir.org] httpd-suspicious-path: sites=www.prostiniki.gr; logs=/var/log/httpd/domains/prostiniki.gr.log; samples=/?author=9 \| /?author=10 show less	Hacking Web App Attack
🇫🇮 YF	2026-10-03 09:30:53 (2 weeks ago)	WordPress author enumeration	Web App Attack
🇩🇪 LRob	2026-10-03 09:05:22 (2 weeks ago)	Web exploit attempt \| method: GET \| path: / \| query: author=1, author=2 \| ua: Mozilla/5.0 (Windows N ... show more Web exploit attempt \| method: GET \| path: / \| query: author=1, author=2 \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-10-02 10:18:35 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
Anonymous	2026-09-09 13:38:45 (1 month ago)	Blocked: Reason='Possible SQL injection activity (86/60 min)'; Requests=86	SQL Injection
Anonymous	2026-05-08 13:38:12 (5 months ago)	Keenetic Firewall: Blocked Traffic (No Port Detected - likely UDP). Blocked 69 times in last 24h.	Port Scan
🇺🇸 xmission.com	2026-04-05 04:34:51 (6 months ago)	Blocked by UFW (TCP on 51593) Source port: 11142 TTL: 44 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51593) Source port: 11142 TTL: 44 Packet length: 60 TOS: 0x08 This report (for 159.26.114.22) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇿 lp	2026-02-18 01:29:39 (7 months ago)	Email account brute force: 2 attempts were recorded from 159.26.114.22 2026-02-18T00:55:06+01:00 war ... show more Email account brute force: 2 attempts were recorded from 159.26.114.22 2026-02-18T00:55:06+01:00 warning: unknown[159.26.114.22]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-18T00:55:07+01:00 warning: unknown[159.26.114.22]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇷🇺 Agrohim	2026-01-23 04:15:15 (8 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-01-19 22:12:24 (8 months ago)	Blocked by UFW (TCP on 50383) Source port: 2008 TTL: 112 Packet length: 52 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 50383) Source port: 2008 TTL: 112 Packet length: 52 TOS: 0x00 This report (for 159.26.114.22) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 144.126.228.60

🇳🇱 109.160.32.150

🇰🇳 204.137.207.228

🇬🇧 185.200.118.46

🇩🇪 165.245.245.98

🇮🇩 165.154.150.65

🇮🇹 79.3.96.178

🇺🇸 68.10.53.47

🇺🇸 66.228.53.4

🇨🇴 45.167.124.117

🇺🇸 40.67.177.106

🇺🇦 176.103.27.100

🇺🇸 57.141.20.30

🇹🇼 1.171.14.204

🇧🇪 198.235.24.166

🇳🇱 185.223.235.36

🇹🇭 183.89.250.247

🇺🇸 162.216.150.118

🇺🇸 77.73.14.137

🇺🇸 66.132.172.217