This IP address has been reported a total of
19
times from
13 distinct
sources.
189.1.245.115 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 6
reports;
France
with 5
reports;
Poland
with 3
reports.
The most common categories in these recent reports were:
Bad Web Bot
13
times;
DDoS Attack
4
times;
Web App Attack
4
times;
Exploited Host
4
times;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
HTTP application-layer DoS / botnet traffic from 189.1.245.115: repeated high-cost dynamic page and ...
show moreHTTP application-layer DoS / botnet traffic from 189.1.245.115: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show moreTriggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /english/safe-city-with-no-tolerance-lines-of-foreigners-at-tabanoc-to-pay-speeding-fines/978536/
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 189.1.245.115: traffic from this ad ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 189.1.245.115: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
This address requests our sites over plain http, is answered with a redirect to https, and never fol ...
show moreThis address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /robots.txt | 2026-09-25 08:20 UTC
show less
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show moreAsking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /robots.txt | 2026-09-16 16:58 UTC
show less
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show moreTriggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /ip
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show moreTriggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /lajme/bota/polonia-pro-zgjerimeve-ne-be/40163
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
ketovoila.pl IP/proxy endpoint probing: hits=1; unique_paths=1; sample_paths=/ip; UA="Mozilla/5.0 (M ...
show moreketovoila.pl IP/proxy endpoint probing: hits=1; unique_paths=1; sample_paths=/ip; UA="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"; window=2026-09-11T01:09:19Z..2026-09-11T01:09:19Z HTTP methods: GET (1).
show less
