AbuseIPDB » 89.85.80.203
89.85.80.203
This IP was reported 9 times. Confidence of
Abuse
is 20% : ?
ISP
Bouygues Telecom SA
Usage Type
Fixed Line ISP
ASN
AS5410
Hostname(s)
89-85-80-203.abo.bbox.fr
Domain Name
bouyguestelecom.fr
Country
🇫🇷
France
City
Paris, Ile-de-France
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 89.85.80.203 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
89.85.80.203 was first reported on
March 13th 2026 , and the most recent report was
5 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-17 11:35:57
(5 hours ago)
(mod_security) mod_security (id:225170) triggered by 89.85.80.203 (89-85-80-203.abo.bbox.fr): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 89.85.80.203 (89-85-80-203.abo.bbox.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 07:35:49.977324 2026] [security2:error] [pid 9518:tid 9518] [client 89.85.80.203:6180] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cartiologyfilms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cartiologyfilms.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atNdlSzJNfm0JfC0b31w9QAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 10:47:00
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 89.85.80.203 (ven69-h03-89-85-80-203.dsl.sta.ab ...
show more
(mod_security) mod_security (id:225170) triggered by 89.85.80.203 (ven69-h03-89-85-80-203.dsl.sta.abo.bbox.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:46:56.196671 2026] [security2:error] [pid 15519:tid 15519] [client 89.85.80.203:6206] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||doctorbalog.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "doctorbalog.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atNSIEEYs-WYHMJw2dgzKQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
oalver
2026-10-16 20:14:51
(20 hours ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wordpress/wp-login.php (HTTP 200). First seen: 2026-10-16. Risk score: 30/100.
show less
Web App Attack
🇺🇸
kosada.com
2026-08-26 07:43:15
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-08-15 07:00:34
(2 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-post.asp
show less
Exploited Host
Bad Web Bot
🇫🇷
BelleFashion
2026-08-09 13:35:00
(2 months ago)
Web App Attack
🇬🇧
Oakley
2026-08-03 01:46:17
(2 months ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇺🇸
quilla
2026-04-03 03:20:35
(6 months ago)
Botnet infected device observed in honeypot (Vector: TCP)
DDoS Attack
🇩🇪
HandyTreff.de
2026-03-13 01:08:30
(7 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -21.755 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -21.755 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.66 Safari/535
show less
Web App Attack
Bad Web Bot
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: