89.105.195.154
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- NovoServe B.V.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS24875
- Domain Name
- novoserve.com
- Country
- 🇳🇱 Netherlands
- City
- Amsterdam, North Holland
Abuse Reports
Total reports
13 from
12 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 pixelXp |
Reason:10 (Web Spam), Via: watishijmooi.nl/index-ajax.php, Message: detectSuspiciousPost count:6 details: Array -
|
Web Spam | |
| 🇩🇪 filstal.org |
Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.3; Trident/4.0)
|
Bad Web Bot | |
| 🇳🇱 Site.eu |
Excessive 404/403 errors
|
Brute-Force | |
| 🇺🇸 francelink.fr |
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-11T08:57:44.000Z.
|
Web App Attack | |
| Anonymous |
Magento custom-option PHP shell upload attempt (jail=magento-upload-exploit)
|
Hacking Web App Attack | |
| 🇲🇾 TPuser |
Honeypot catch: used a leaked decoy OpenAI-style API key. Request: GET /v1/models. User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36. Automated credential theft / API key abuse.
|
Hacking Web App Attack | |
| 🇩🇪 ecs.ge |
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
|
Web App Attack Hacking | |
| 🇰🇿 anchoredregistry |
Distributed HTTP basic-auth brute force on /admin/, 5064 requests, python-requests/2.32.5, part of a 169-address campaign
|
Brute-Force Web App Attack | |
| 🇺🇸 francelink.fr |
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-11T08:57:21.000Z.
|
Web App Attack | |
| 🇩🇪 klaus_ph |
89.105.195.154 - - [11/Nov/2026:03:47:39 +0100] "GET / HTTP/1.0" 200 833 "http://pcservice-radeberg.de/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0"
...
|
Bad Web Bot | |
| 🇨🇭 4server |
|
Hacking Web App Attack | |
| 🇬🇧 Aetherweb Ark |
(mod_security) mod_security (id:949110) triggered by 89.105.195.154 (NL/The Netherlands/-): N in the last X secs
|
Web App Attack | |
| 🇦🇺 oncord |
Form spam
|
Web Spam |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown