This IP address has been reported a total of
24
times from
22 distinct
sources.
159.203.106.56 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
HEAD /new/ HTTP/1.1
HEAD /old/ HTTP/1.1
HEAD /blog/ HTTP/1.1
HEAD /wp/ HTTP/1.1
HEAD /wordpress/ HTT ...
show moreHEAD /new/ HTTP/1.1
HEAD /old/ HTTP/1.1
HEAD /blog/ HTTP/1.1
HEAD /wp/ HTTP/1.1
HEAD /wordpress/ HTTP/1.1
HEAD /backup/ HTTP/1.1
show less
Probing for /backup
159.203.106.56 - - [15/Sep/2026:23:58:50 +0200] "HEAD /backup/ HTTP/2.0" 404 0 " ...
show moreProbing for /backup
159.203.106.56 - - [15/Sep/2026:23:58:50 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "https://*REDACTED*/backup/" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36"
show less
Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing
show less
Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ...
show moreWeb reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths.
show less
Probing for /backup
159.203.106.56 - - [15/Sep/2026:19:29:50 +0200] "HEAD /backup/ HTTP/2.0" 404 0 " ...
show moreProbing for /backup
159.203.106.56 - - [15/Sep/2026:19:29:50 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "http://*REDACTED*/backup/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1"
show less