This IP address has been reported a total of
135
times from
46 distinct
sources.
159.89.52.203 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 11
reports;
United States of America
with 9
reports;
France
with 3
reports.
The most common categories in these recent reports were:
Bad Web Bot
15
times;
Web App Attack
8
times;
Brute-Force
5
times;
Exploited Host
4
times;
Hacking
2
times;
Other
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
Anonymous
Search protection: facets on category: 7 values in one group (limit 5) / reCAPTCHA challenge timed o ...
show moreSearch protection: facets on category: 7 values in one group (limit 5) / reCAPTCHA challenge timed out
show less
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -114.476 (Bad < -10 / Very Bad < -20 ...
show moreBot/Spam/Scrapper attack detected on www.handytreff.de - Score: -114.476 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa
show less
Bad web bot: repeated unauthorized requests to /map-image/ endpoint (403 responses) without valid or ...
show moreBad web bot: repeated unauthorized requests to /map-image/ endpoint (403 responses) without valid origin — suspected coordinate scraper. Banned 7 days.
show less
Bad web bot: repeated unauthorized requests to /map-image/ endpoint (403 responses) without valid or ...
show moreBad web bot: repeated unauthorized requests to /map-image/ endpoint (403 responses) without valid origin — suspected coordinate scraper. Banned 7 days.
show less
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ...
show moreKingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (60, Abuse: 51)
show less
Repeated requests classified as pathological web bot behavior, for example: /user_avatar/[redacted]/ ...
show moreRepeated requests classified as pathological web bot behavior, for example: /user_avatar/[redacted]/24/8316_2.png (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
show less
This address requests our sites over plain http, is answered with a redirect to https, and never fol ...
show moreThis address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /wp-content/uploads/2020/09/SI_Agenda_Colis_de_noel.png | 2026-09-22 00:10 UTC
show less
Fail2Ban: 159.89.52.203 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ...
show moreFail2Ban: 159.89.52.203 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
show less
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show moreAsking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /images/galeries/actualites/so-confluent/CC%20CONFLUENT_WEB_GRAND.jpg | 2026-09-14 05:47 UTC
show less
