JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 81.199.26.47

81.199.26.47 was found in our database!

This IP was reported 215 times. Confidence of Abuse is 0%: ?

ISP	21 Enterprises, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	nam21enterprisesllc.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 81.199.26.47

Whois 81.199.26.47

IP Abuse Reports for 81.199.26.47:

This IP address has been reported a total of 215 times from 91 distinct sources. 81.199.26.47 was first reported on September 20th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-07-09 13:11:44 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 81.199.26.47 (DE/Germany/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 81.199.26.47 (DE/Germany/-): 1 in the last 3600 secs show less	Web App Attack
🇫🇷 Thaliruth	2026-06-16 06:40:22 (2 months ago)	81.199.26.47 - - [16/Jun/2026:08:40:22 +0200] "GET /adminer.php HTTP/1.1" 404 257 "-" "Mozilla/5.0 ( ... show more 81.199.26.47 - - [16/Jun/2026:08:40:22 +0200] "GET /adminer.php HTTP/1.1" 404 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0" ... show less	Brute-Force Web App Attack
🇺🇸 interbiznw.com	2026-06-16 02:56:41 (2 months ago)	fail2ban-ban	Hacking Brute-Force Exploited Host Web App Attack
🇫🇮 as211431.net	2026-06-16 02:05:29 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /adminer.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 Site.eu	2026-06-05 12:40:00 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇪🇸 masterguru	2026-06-05 03:38:16 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
Anonymous	2026-05-17 17:03:12 (3 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Mali ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Malicious User-Agent show less	Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-05-16 17:04:42 (3 months ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-05-16 16:04:10 (3 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Mali ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Malicious User-Agent show less	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-16 12:20:33 (3 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-15 00:50:36 (3 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 08:32:14 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 81.199.26.47 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 81.199.26.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 04:32:08.962571 2026] [security2:error] [pid 17219:tid 17219] [client 81.199.26.47:51673] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|exresearch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "exresearch.com"] [uri "/images/stories/themes.php"] [unique_id "agLliOVk4RnaxG5VZ14CnAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-09 11:13:48 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 81.199.26.47 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 81.199.26.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 07:13:41.590433 2026] [security2:error] [pid 30717:tid 30717] [client 81.199.26.47:59867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deannlottmusic.com"] [uri "/wp-config.php"] [unique_id "af8W5VfACSPoWx9AVsh3MgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-05-08 01:20:49 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-193) show less	Bad Web Bot
Anonymous	2026-05-07 09:59:10 (3 months ago)	81.199.26.47 - - [07/May/2026:11:59:08 +0200] "GET /wp-includes/pomo/about.php HTTP/1.1" 404 124 "-" ... show more 81.199.26.47 - - [07/May/2026:11:59:08 +0200] "GET /wp-includes/pomo/about.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 81.199.26.47 - - [07/May/2026:11:59:08 +0200] "GET /wp-includes/module.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 81.199.26.47 - - [07/May/2026:11:59:09 +0200] "GET /wp-content/plugins/about.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 81.199.26.47 - - [07/May/2026:11:59:09 +0200] "GET /wp-includes/blocks/widget-group/ HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 81.199.26.47 - - [07/May/2026:11:59:10 +0200] "GET /wp-includes/blocks/post-content/ HTTP/1.1" 404 124 "-" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 215 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a03:b0c0:2:f0:0:1:c2e2:5001

🇩🇪 152.53.185.81

🇫🇷 143.244.57.118

🇫🇷 91.196.152.200

🇳🇱 91.92.42.126

🇺🇸 67.215.227.54

🇺🇸 48.47.31.11

🇧🇷 45.181.242.66

🇺🇸 45.79.110.218

🇮🇷 37.255.197.138

🇺🇸 34.73.62.26

🇺🇸 23.92.26.77

🇺🇸 20.169.16.7

🇨🇦 20.104.50.220

🇨🇦 2001:18c0:99d:a200:800a:81c9:c412:9212

🇺🇸 216.25.89.101

🇨🇦 178.128.235.61

🇺🇸 159.203.115.61

🇩🇪 159.195.139.53

🇺🇸 137.131.28.156