JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.110.95.200

89.110.95.200

Neutral Activity

55 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Hosting technology LTD

Usage Type

Data Center/Web Hosting/Transit

ASN

AS48282

Hostname(s)

v2912881.hosted-by-vdsina.ru

Domain Name

vdsina.ru

Country

🇷🇺 Russian Federation

City

Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

89.110.95.200 has been reported 55 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 89.110.95.200:

This IP address has been reported a total of 55 times from 23 distinct sources. 89.110.95.200 was first reported on May 14th 2025, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2025-09-17 12:18:17 (11 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-08-09 04:44:05 (1 year ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2025-08-08 00:57:05 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 ... show more (mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 07 20:57:01.950004 2025] [security2:error] [pid 4002498:tid 4002515] [client 89.110.95.200:57188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.citydentalclinic.com"] [uri "/.git/config"] [unique_id "aJVLXe9OToSlnPVj00uwxQAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-07 09:37:35 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 ... show more (mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 07 05:37:31.157610 2025] [security2:error] [pid 3909:tid 3909] [client 89.110.95.200:44144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desertautoworks.com"] [uri "/wp-config.php_____"] [unique_id "aJRz2_FXsLf-nJcqohghEgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2025-08-07 04:34:01 (1 year ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇦🇺 Chris Jarvis	2025-08-06 04:41:17 (1 year ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇺🇸 TPI-Abuse	2025-08-05 02:35:07 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 ... show more (mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 04 22:35:00.168288 2025] [security2:error] [pid 18768:tid 18768] [client 89.110.95.200:60774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.utah17.com"] [uri "/.git/config"] [unique_id "aJFt1I2j3McfXCdgJBs1KgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-04 20:02:46 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 ... show more (mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 04 16:02:39.375693 2025] [security2:error] [pid 6718:tid 6718] [client 89.110.95.200:45792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sideralis.mx"] [uri "/.git/config"] [unique_id "aJER3zJUAjdGBSIOPh5yVQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-04 18:11:23 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 ... show more (mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 04 14:11:19.595730 2025] [security2:error] [pid 14903:tid 14903] [client 89.110.95.200:44834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.digitaltom.net"] [uri "/.git/config"] [unique_id "aJD3x8ko0JgEZmHUTNszhgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-04 11:15:39 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 ... show more (mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 04 07:15:34.114513 2025] [security2:error] [pid 32323:tid 32323] [client 89.110.95.200:54302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mmipro.com"] [uri "/.git/config"] [unique_id "aJCWVjaZYRqqSzvZtIXfFQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-03 09:24:21 (1 year ago)		Web Spam Bad Web Bot
🇺🇸 TPI-Abuse	2025-08-03 06:15:59 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 ... show more (mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 03 02:15:55.998009 2025] [security2:error] [pid 9883:tid 9907] [client 89.110.95.200:56120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbestcarting.com"] [uri "/wp-config.php_old4"] [unique_id "aI7-m8sr_GoKKUCVKtC2DgAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-02 02:22:05 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 ... show more (mod_security) mod_security (id:210492) triggered by 89.110.95.200 (v2819051.hosted-by-vdsina.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 22:21:59.085333 2025] [security2:error] [pid 3015:tid 3015] [client 89.110.95.200:51178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawaiivacations.com"] [uri "/wp-config.phpback"] [unique_id "aI12R4PTjELCQPtbYWfKhwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Hydra-Shield.fr	2025-08-01 23:23:26 (1 year ago)	Automated DDoS behavior detected targeting production services. Multiple anomalous connections and p ... show more Automated DDoS behavior detected targeting production services. Multiple anomalous connections and packet floods recorded. show less	Brute-Force SSH
Anonymous	2025-07-29 03:49:21 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:1900:4020:5ea:0:2b8::

🇮🇳 220.158.184.112

🇧🇬 212.21.155.229

🇺🇸 209.38.69.12

🇲🇽 187.189.114.192

🇻🇳 163.227.161.160

🇵🇹 103.211.90.84

🇳🇱 45.148.10.157

🇺🇸 40.125.42.10

🇮🇶 38.236.87.18

🇺🇸 34.11.214.74

🇺🇸 18.97.5.64

🇫🇷 5.189.159.115

🇺🇸 209.139.48.243

🇧🇷 201.46.80.235

🇮🇳 195.250.30.134

🇬🇧 185.247.137.84

🇧🇷 179.48.18.42

🇺🇸 161.123.86.212

🇬🇧 161.35.167.103