This IP address has been reported a total of
24
times from
22 distinct
sources.
159.89.12.71 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: WordPress scanning, Backup file probing
show less
Cluster member (Omitted) (FR/France/-) said, TEMPDENY 159.89.12.71, Reason:[(Suspicious404) Suspicio ...
show moreCluster member (Omitted) (FR/France/-) said, TEMPDENY 159.89.12.71, Reason:[(Suspicious404) Suspicious activity detected 159.89.12.71 (DE/Germany/-): 10 in the last 3600 secs]
show less
Brute-Force
SSH
Anonymous
Malicious inbound activity detected by IPS and blocked.
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing ...
show moreKingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: Error404-LocalePath (/at11065/website/)
show less
http-probing - IP: 159.89.12.71 - time="2026-10-15T22:09:03+02:00" level=info msg="(555f66b4f6a7455 ...
show morehttp-probing - IP: 159.89.12.71 - time="2026-10-15T22:09:03+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 159.89.12.71 (DE/14061) : 4h ban on Ip 159.89.12.71" module=db
show less
Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ...
show moreWeb reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths.
show less