JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 84.32.104.50

84.32.104.50 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	UAB Nacionalinis Telekomunikaciju Tinklas
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59642
Hostname(s)	ip-84-32-104-50.001.ptr.cherryservers.net
Domain Name	ntt.lt
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 84.32.104.50

Whois 84.32.104.50

IP Abuse Reports for 84.32.104.50:

This IP address has been reported a total of 21 times from 20 distinct sources. 84.32.104.50 was first reported on July 14th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-15 22:31:24 (3 hours ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-14 22:30:50 (1 day ago)		Brute-Force Web App Attack
Anonymous	2026-07-14 20:18:12 (1 day ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇫🇮 payincog	2026-07-14 15:00:13 (1 day ago)	Date: Jul 14 17:33:54 2026 EAT \| Reported IP: 84.32.104.50 mod_security \| id: 920350 930130 949110 9 ... show more Date: Jul 14 17:33:54 2026 EAT \| Reported IP: 84.32.104.50 mod_security \| id: 920350 930130 949110 920440 \| NL/pay.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Host header is a numeric IP address; Host header is a numeric IP address; URL file extension is restricted by policy; URL file extension is restricted by policy; Restricted File Access Attempt; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 13); Inbound Anomaly Score Exceeded (Total Score: 13); Host header is a numeric IP address; Host header is a numeric IP address; URL file extension is restricted by policy; Restricted File Access Attempt; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Host header is a numeric IP address; Host header is a numeric IP address; Host he show less	SQL Injection Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-07-14 14:47:13 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 macrob	2026-07-14 14:47:12 (1 day ago)	2026/07/14 14:47:09 [error] 3428136#3428136: 375908312 access forbidden by rule, client: 84.32.104. ... show more 2026/07/14 14:47:09 [error] 3428136#3428136: 375908312 access forbidden by rule, client: 84.32.104.50, server: fn.binixo.es, request: "GET /.env HTTP/2.0", host: "172.104.245.160:443" 2026/07/14 14:47:10 [error] 3428136#3428136: 375908312 access forbidden by rule, client: 84.32.104.50, server: fn.binixo.es, request: "GET /.env.backup HTTP/2.0", host: "172.104.245.160:443" 2026/07/14 14:47:10 [error] 3428136#3428136: 375908312 access forbidden by rule, client: 84.32.104.50, server: fn.binixo.es, request: "GET /.env.old HTTP/2.0", host: "172.104.245.160:443" ... show less	Web App Attack
Anonymous	2026-07-14 14:46:04 (1 day ago)	84.32.104.50 - - [14/Jul/2026:16:45:57 +0200] "GET /.env HTTP/1.1" 403 567 "-" "Mozilla/5.0 (Macinto ... show more 84.32.104.50 - - [14/Jul/2026:16:45:57 +0200] "GET /.env HTTP/1.1" 403 567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" 84.32.104.50 - - [14/Jul/2026:16:45:58 +0200] "GET /.env HTTP/1.1" 403 567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" 84.32.104.50 - - [14/Jul/2026:16:45:58 +0200] "GET /.env.backup HTTP/1.1" 403 567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" 84.32.104.50 - - [14/Jul/2026:16:45:59 +0200] "GET /.env.backup HTTP/1.1" 403 567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Instit ... show less	Bad Web Bot Web App Attack
🇺🇸 itsnixk	2026-07-14 14:45:57 (1 day ago)	(mod_security) mod_security (id:920350) triggered by 84.32.104.50 (NL/The Netherlands/ip-84-32-104-5 ... show more (mod_security) mod_security (id:920350) triggered by 84.32.104.50 (NL/The Netherlands/ip-84-32-104-50.001.ptr.cherryservers.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 14 10:45:54.087174 2026] [security2:error] [pid 189054:tid 189167] [client 84.32.104.50:61486] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/.env"] [unique_id "alZLooIaid5YFm6DmfOFVAAAAF4"] show less	Port Scan
🇩🇪 sdos.es	2026-07-14 14:43:49 (1 day ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
🇺🇸 jcbriar	2026-07-14 14:41:37 (1 day ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇫🇷 Duggy_Tuxy🧱	2026-07-14 14:41:28 (1 day ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇺🇸 Keith Beucler	2026-07-14 14:39:38 (1 day ago)	K5 Services fail2ban jail nginx-k5-web-probes detected high-confidence web abuse. Local web ban appl ... show more K5 Services fail2ban jail nginx-k5-web-probes detected high-confidence web abuse. Local web ban applied. Categories: 19,21. show less	Bad Web Bot Web App Attack
🇬🇧 Apache	2026-07-14 14:39:36 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 84.32.104.50 (ip-84-32-104-50.001.ptr.cherryser ... show more (mod_security) mod_security (id:210492) triggered by 84.32.104.50 (ip-84-32-104-50.001.ptr.cherryservers.net): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇺🇸 Rip	2026-07-14 14:39:33 (1 day ago)	Restricted File Access Attempts	Port Scan Web App Attack
🇧🇪 boxed-it	2026-07-14 14:35:50 (1 day ago)	GET /.env (Tarpitted for 2m10s, wasted 7.73kB)	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 201.218.157.107

🇹🇭 125.27.12.122

🇺🇸 91.230.168.13

🇬🇧 35.203.210.43

🇧🇷 205.210.31.243

🇺🇸 162.216.149.215

🇳🇱 160.119.71.136

🇧🇬 91.92.47.53

🇺🇸 65.49.1.232

🇨🇳 58.59.233.158

🇷🇺 46.167.111.110

🇧🇷 45.205.1.247

🇧🇷 45.178.227.0

🇩🇪 23.88.68.58

🇧🇷 20.197.192.193

🇺🇸 20.189.188.7

🇸🇬 4.193.175.44

🇲🇽 189.180.16.30

🇧🇷 187.125.176.189

🇩🇪 141.11.107.4