JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.26.120.8

159.26.120.8 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 80%: ?

80%

ISP	PV-SL-HOSTED-Kyiv-Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208172
Domain Name	ip.me
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.26.120.8

Whois 159.26.120.8

IP Abuse Reports for 159.26.120.8:

This IP address has been reported a total of 24 times from 16 distinct sources. 159.26.120.8 was first reported on October 31st 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 neo72	2026-07-03 08:14:36 (15 hours ago)	Detected malicious activity - bulk block	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 07:24:56 (15 hours ago)	(mod_security) mod_security (id:225170) triggered by 159.26.120.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 159.26.120.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 03:24:52.222882 2026] [security2:error] [pid 30315:tid 30315] [client 159.26.120.8:8271] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.goldcountrygermanamericanclub.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.goldcountrygermanamericanclub.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "akdjxCMPDs1TnsrBJho1JQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-03 06:05:29 (17 hours ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=48	Hacking
🇺🇸 TPI-Abuse	2026-07-03 05:49:43 (17 hours ago)	(mod_security) mod_security (id:225170) triggered by 159.26.120.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 159.26.120.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 01:49:36.006503 2026] [security2:error] [pid 3155:tid 3155] [client 159.26.120.8:42496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.godcanuseyou.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.godcanuseyou.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akdNcIf3NBLAIa7GQyG6lwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-07-03 03:08:41 (20 hours ago)	(wordpress) Failed wordpress login from 159.26.120.8 (UA/Ukraine/-): (CF_ENABLE)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-03 02:27:39 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 159.26.120.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 159.26.120.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 22:27:33.665824 2026] [security2:error] [pid 14316:tid 14316] [client 159.26.120.8:42875] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 159.26.120.8 (+1 hits since last alert)\|globalsolutions.technology\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "globalsolutions.technology"] [uri "/xmlrpc.php"] [unique_id "akceFfbxvkdrwm_uKgGiIAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-03 01:28:55 (21 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 Ba-Yu	2026-07-03 01:26:37 (21 hours ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 00:51:16 (22 hours ago)	(mod_security) mod_security (id:225170) triggered by 159.26.120.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 159.26.120.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 20:51:11.045284 2026] [security2:error] [pid 6207:tid 6207] [client 159.26.120.8:61801] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|glassclublake.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "glassclublake.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akcHf72CFzF-jo_-690sgAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-07-02 23:45:22 (23 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 mnsf	2026-07-02 23:05:12 (1 day ago)	Too many Status 40X (14)	Brute-Force Web App Attack
🇮🇱 Dolphi	2026-07-02 22:20:03 (1 day ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 22:18:44 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 159.26.120.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 159.26.120.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 18:18:38.300108 2026] [security2:error] [pid 1971:tid 1977] [client 159.26.120.8:26289] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.gilesrentalcars.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gilesrentalcars.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akbjvkCcEYofLKLQ1KYA5gAAAEQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-02 22:14:40 (1 day ago)	Attac	Brute-Force
Anonymous	2026-07-02 22:11:02 (1 day ago)	Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //?author=2 HTTP/1.1, GET // ... show more Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //?author=2 HTTP/1.1, GET //xmlrpc.php?rsd HTTP/1.1, GET //feed/ HTTP/1.1, GET //wp-json/wp/v2/users/ HTTP/1.1, GET //?author=1 HTTP/1.1, GET //wp-includes/ID3/license.txt HTTP/1.1 show less	Hacking Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.68

🇺🇸 146.190.149.252

🇷🇺 62.122.195.14

🇨🇳 115.190.181.231

🇧🇪 198.235.24.228

🇳🇱 195.178.110.228

🇺🇸 192.0.103.4

🇨🇱 186.10.86.130

🇸🇬 159.65.143.47

🇷🇺 154.90.70.254

🇨🇳 118.196.64.77

🇰🇪 102.206.114.75

🇨🇳 101.126.55.63

🇮🇷 94.183.59.33

🇷🇴 92.118.39.77

🇺🇸 212.32.120.25

🇬🇧 178.62.37.109

🇮🇳 103.180.212.135

🇷🇺 94.180.250.11

🇩🇪 82.39.212.213