Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 159.203.1.98
This IP address has been reported a total of
39
times from
30 distinct
sources.
159.203.1.98 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 8
reports;
Brazil
with 4
reports;
Germany
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
17
times;
Hacking
6
times;
Brute-Force
5
times;
Port Scan
5
times;
Bad Web Bot
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-21 05:54:23 GET /wp-login.php - - 159.203.1.98 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64; ...
show more2026-09-21 05:54:23 GET /wp-login.php - - 159.203.1.98 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 200 9494
2026-09-21 05:54:25 POST /xmlrpc.php - - 159.203.1.98 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 - 301 619
2026-09-21 05:54:26 POST /wp-login.php - - 159.203.1.98 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/78.0.3904.108+Safari/537.36 https://www.balbinomoveis.com.br//wp-login.php 200 9653
...
show less
Brute-Force
Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning
show less
(PERMBLOCK) 159.203.1.98 (CA/Canada/-) has had more than 4 temp blocks in the last 86400 secs; IP: 1 ...
show more(PERMBLOCK) 159.203.1.98 (CA/Canada/-) has had more than 4 temp blocks in the last 86400 secs; IP: 159.203.1.98; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET / HTTP/1.1" "GET /2018/wp- ...
show moreAutomated web credential/secret scanner blocked by Fail2Ban. Probed: "GET / HTTP/1.1" "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1"
show less
Web App Attack
Bad Web Bot
Anonymous
Observed WordPress/CMS reconnaissance against a web application under my control. Representative pat ...
show moreObserved WordPress/CMS reconnaissance against a web application under my control. Representative paths: /xmlrpc.php, /wp-includes/wlwmanifest.xml, /2019/wp-includes/wlwmanifest.xml, /test/wp-includes/wlwmanifest.xml, /shop/wp-includes/wlwmanifest.xml, /2018/wp-includes/wlwmanifest.xml, /website/wp-includes/wlwmanifest.xml, /news/wp-includes/wlwmanifest.xml. 8 blocked requests in a short window. Observed directly in Cloudflare Security Events on infrastructure under my control.
show less
(wpscan) WordPress probe detected from 159.203.1.98 (CA/Canada/-)
Hacking
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CA, Attack patterns: WordPress scanning
show less
