JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.26.119.219

159.26.119.219 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 33%: ?

33%

ISP	PV-SL-HOSTED-Akasaka-Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208172
Domain Name	ip.me
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.26.119.219

Whois 159.26.119.219

IP Abuse Reports for 159.26.119.219:

This IP address has been reported a total of 21 times from 16 distinct sources. 159.26.119.219 was first reported on January 29th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 A000Z	2026-07-13 01:05:15 (6 days ago)	Fail2Ban: 159.26.119.219 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 159.26.119.219 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇩 sockominfo	2026-07-10 15:01:00 (1 week ago)	User login to application from malicious IP 159.26.119.219.. Threat Score: 4.7/10 (MEDIUM). Confiden ... show more User login to application from malicious IP 159.26.119.219.. Threat Score: 4.7/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 88%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-10 14:00:10 (1 week ago)	User login to application from malicious IP 159.26.119.219.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 159.26.119.219.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-07-09 11:33:06 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-25 12:22:51 (3 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇬🇧 Oakley	2026-06-09 02:08:13 (1 month ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇺🇸 oncord	2026-06-02 17:26:45 (1 month ago)	Form spam	Web Spam
🇩🇪 Vegascosmetics	2026-06-01 10:38:02 (1 month ago)	Kingcopy(AI-IDS) Report: IP 159.26.119.219 wurde nach 3 Angriffsversuchen automatisch geblockt. Patt ... show more Kingcopy(AI-IDS) Report: IP 159.26.119.219 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern: High Priority: ChooseCountrie - Vegas Cosmetics Security System show less	DDoS Attack Hacking Bad Web Bot
🇬🇧 PeravixGroup	2026-05-30 15:49:03 (1 month ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-30 01:54:46 (1 month ago)	Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran. ... show more Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran.cloud show less	Port Scan
🇦🇺 LiftUp Hosting	2026-05-30 01:52:01 (1 month ago)	Honeypot hit: HTTP/1.1 request on 8848 GET /nacos/v1/cs/configs?dataId=&group=&tenant=&search=accur ... show more Honeypot hit: HTTP/1.1 request on 8848 GET /nacos/v1/cs/configs?dataId=&group=&tenant=&search=accurate&pageNo=1&pageSize=1 User-Agent: Go-http-client/1.1 Accept: application/json; 8848 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 xmission.com	2026-05-05 23:15:19 (2 months ago)	Blocked by UFW (TCP on 9101) Source port: 26713 TTL: 55 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 26713 TTL: 55 Packet length: 60 TOS: 0x08 This report (for 159.26.119.219) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-22 21:39:48 (2 months ago)	159.26.119.219 - - [22/Apr/2026:23:39:43 +0200] "POST /wp-login.php HTTP/1.0" 200 2643 "-" "Mozilla/ ... show more 159.26.119.219 - - [22/Apr/2026:23:39:43 +0200] "POST /wp-login.php HTTP/1.0" 200 2643 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36" 159.26.119.219 - - [22/Apr/2026:23:39:44 +0200] "POST /wp-login.php HTTP/1.1" 200 2105 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36" 159.26.119.219 - - [22/Apr/2026:23:39:45 +0200] "POST /wp-login.php HTTP/1.0" 200 2617 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 159.26.119.219 - - [22/Apr/2026:23:39:45 +0200] "POST /wp-login.php HTTP/1.1" 200 2079 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 159.26.119.219 - - [22/Apr/2026:23:39:47 +0200] "POST /wp-login.php HTTP/1.0" 200 2617 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; MALCJS; rv ... show less	Brute-Force Web App Attack
🇪🇸 el-brujo	2026-04-21 06:10:50 (2 months ago)	[Tue Apr 21 08:05:53.631735 2026] [proxy_fcgi:error] [pid 1265831:tid 1265863] [remote 159.26.119.21 ... show more [Tue Apr 21 08:05:53.631735 2026] [proxy_fcgi:error] [pid 1265831:tid 1265863] [remote 159.26.119.219:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.elhacker.net/ [Tue Apr 21 08:10:50.279040 2026] [proxy_fcgi:error] [pid 1250795:tid 1250828] [remote 159.26.119.219:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.elhacker.net/ ... show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-04-19 20:48:04 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.161.251.195

🇨🇳 183.230.155.13

🇮🇩 163.7.1.156

🇺🇸 162.216.149.44

🇵🇰 153.117.38.163

🇵🇰 153.117.13.63

🇻🇳 117.5.184.237

🇺🇸 103.168.67.253

🇧🇬 79.124.56.246

🇺🇸 47.251.100.223

🇨🇭 34.65.90.156

🇩🇪 213.209.159.231

🇩🇪 213.209.159.226

🇲🇽 201.165.149.118

🇩🇴 190.93.191.12

🇩🇪 167.94.146.33

🇲🇽 148.224.96.22

🇭🇰 119.28.177.175

🇨🇳 115.231.78.11

🇺🇸 100.50.17.159