This IP address has been reported a total of
14
times from
12 distinct
sources.
159.26.118.18 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Poland
with 3
reports;
Netherlands
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
13
times;
Bad Web Bot
6
times;
Hacking
4
times;
Brute-Force
2
times;
SSH
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[09/Oct/2026:20:15:22 +0300] -- 159.26.118.18 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-l ...
show more[09/Oct/2026:20:15:22 +0300] -- 159.26.118.18 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-login.php HTTP/1.1
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-30.
show less
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show moreAutomated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.goblinpot.store | URI: /.env.example | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.3124.85 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
Anonymous
[server.tmg.gr] httpd-config-scan: sites=www.irad2023.gr; logs=/var/log/httpd/domains/irad2023.gr.lo ...
show more[server.tmg.gr] httpd-config-scan: sites=www.irad2023.gr; logs=/var/log/httpd/domains/irad2023.gr.log; samples=/.env.example | /.env
show less
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show moreWeb scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Blocked by UFW (TCP on 51413)
Source port: 29607
TTL: 48
Packet length: 60
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 51413)
Source port: 29607
TTL: 48
Packet length: 60
TOS: 0x08
This report (for 159.26.118.18) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Showing 1 to
14
of 14 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
