89.106.1.23

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
187 reports
122 reporters · latest 1 week ago
ISP
Colocation America Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS19318
Domain Name
colocationamerica.com
Country
🇺🇸 United States of America
City
Secaucus, New Jersey
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
187 from 122 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 63 🇩🇪 Germany 31 🇫🇷 France 19
Most common categories Web App Attack 156 Bad Web Bot 72 Hacking 36 Brute-Force 35 Port Scan 8
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇪🇸 librebit
Brute force
Brute-Force
🇩🇪 DocNetzwerk
(mod_security) mod_security triggered on hostname [redacted] 89.106.1.23 (US/United States/-)
SQL Injection
🇫🇷 ELYAZ
(credential-hunter) Failed credential-hunter trigger with match [redacted] from 89.106.1.23 (US/United States/-): (CF_ENABLE)
Hacking
🇳🇱 Alt255
Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting
(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 89.106.1.23 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸 RH5
Restricted URL probing (/.env) (UTC 2026-11-06 23:20)
Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-05.
Web App Attack SSH Hacking
🇨🇱 Fernando Soto
WAF propio vps1 (CL): sensx2 score 8 en 1h. sondeo rutas sensibles.
Web App Attack
🇺🇸 craudiovizai
Automated honeypot detection. honeypot against a Next.js application. Paths: /.env. Blocked at the edge.
Web App Attack Bad Web Bot
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇦 jacqueskruger
Web App Attack
🇸🇬 ipidentify
2026-11-05T08:18:11Z GET /.env
Web App Attack
🇬🇧 Smish
Web App Attack
🇫🇷 Baking333
Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 177.126.95.207
🇰🇷 175.203.243.177
🇺🇸 162.216.149.206
🇬🇧 154.16.44.211
🇨🇳 113.24.225.27
🇷🇴 81.181.129.218
🇳🇱 80.82.65.140
🇳🇱 45.227.255.157
🇨🇦 45.198.224.162
🇧🇪 34.52.152.34
🇳🇱 195.178.110.26
🇵🇦 190.141.121.71
🇮🇳 152.32.159.62
🇧🇬 79.124.62.134
🇳🇱 77.239.124.64
🇺🇸 66.132.159.41
feedback