14.152.91.159

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
91% Critical
366 reports
62 reporters · latest 21 hours ago
ISP
CHINANET Guangdong province network
Usage Type
Fixed Line ISP
ASN
AS134763
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Guangzhou, Guangdong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
366 from 62 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇦 Ukraine 42 🇺🇸 United States of America 23 🇩🇪 Germany 6
Most common categories Web App Attack 59 Bad Web Bot 59 Brute-Force 15 SSH 12 DDoS Attack 6
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 Rayulcifer
Brute-Force SSH
🇺🇸 kosada.com
Repeated requests classified as pathological web bot behavior, for example: /assets/favicon.ico (HTTP/1.1 port 443, user agent: "Go-http-client/1.1")
DDoS Attack Bad Web Bot
🇺🇸 servicesboats
14.152.91.159 - - [12/Nov/2026:21:51:07 -0800] "GET /assets/favicon.ico HTTP/2.0" 403 487 "-" "Go-http-client/2.0" ...
Web App Attack
🇩🇪 Skyrider
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot Web App Attack
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇪🇸 scm
Web App Attack
🇩🇪 Skyrider
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service
[10/Nov/2026:08:06:00 +0200] -- 14.152.91.159 Ban reason: User-Agent Go-http-client
Bad Web Bot Web App Attack
🇺🇸 servicesboats
14.152.91.159 - - [09/Nov/2026:22:03:25 -0800] "GET /static/favicon.ico HTTP/1.1" 403 564 "-" "Go-http-client/1.1" ...
Web App Attack
🇹🇭 thaizone.com
Brute Force Attack on a Web Resources (repeated 404) #1
DDoS Attack Web Spam Brute-Force Web App Attack
🇹🇼 tyetriiix
Wazuh Alert Evidence: 2026/11/08 15:04:20 [error] 2935603#2935603: *1705 access forbidden by rule, client: 14.152.91.159, server: strapii.triiix.io, request: "GET /444 HTTP/2.0", host: "strapii.triiix.io"
Web App Attack
🇲🇾 Rizzy
Multiple WAF Violations
Brute-Force Web App Attack
🇺🇦 URAN Publishing Service
[08/Nov/2026:08:03:01 +0200] -- 14.152.91.159 Ban reason: User-Agent Go-http-client
Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service
[07/Nov/2026:08:01:33 +0200] -- 14.152.91.159 Ban reason: User-Agent Go-http-client
Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇱 186.67.200.11
🇵🇾 181.40.58.165
🇺🇸 159.223.170.244
🇰🇷 125.182.93.18
🇫🇮 122.8.46.162
🇿🇦 102.64.45.8
🇷🇴 80.94.92.55
🇺🇸 64.62.197.168
🇧🇩 160.187.117.47
🇨🇳 124.77.132.122
🇷🇴 92.118.39.92
🇲🇾 61.6.33.167
feedback