JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.124.104.192

89.124.104.192 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 100%: ?

100%

ISP	SERVERS TECH FZCO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS216071
Domain Name	vdsina.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.124.104.192

Whois 89.124.104.192

IP Abuse Reports for 89.124.104.192:

This IP address has been reported a total of 131 times from 65 distinct sources. 89.124.104.192 was first reported on April 13th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-06-16 22:06:38 (4 days ago)	[WedJun1700:06:32.8033282026][security2:error][pid2019911:tid2020877][client89.124.104.192:0]ModSecu ... show more [WedJun1700:06:32.8033282026][security2:error][pid2019911:tid2020877][client89.124.104.192:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"382\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"whatsdecor.ch\"][uri\"/wp-content/plugins/userpro-mediamanager/changelog.txt\"][unique_id\"ajHI6K8dBh9l3PwBcaLhVgAAAMc\"] show less	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-16 21:59:06 (4 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-15. show less	Web App Attack SSH Hacking
🇺🇸 cwytech	2026-06-16 18:56:43 (4 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.	Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-06-16 18:30:12 (4 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇩🇪 FeG Deutschland	2026-06-16 17:00:42 (4 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇬🇧 consul.to	2026-06-16 11:43:16 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Baking333	2026-06-16 10:17:37 (5 days ago)	[redacted] 89.124.104.192 - - [16/Jun/2026:11:17:35 +0100] "GET /.[redacted] HTTP/1.1" 302 5278 0/13 ... show more [redacted] 89.124.104.192 - - [16/Jun/2026:11:17:35 +0100] "GET /.[redacted] HTTP/1.1" 302 5278 0/130815 "-" "Mozilla/5.0 (X11; Linux i686; rv:124.0) Gecko/20100101 Firefox/124.0" [redacted] 89.124.104.192 - - [16/Jun/2026:11:17:35 +0100] "GET /.[redacted] HTTP/1.1" 302 5278 0/92753 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.10" show less	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-06-16 08:00:36 (5 days ago)	[redacted] 89.124.104.192 - - [16/Jun/2026:09:00:35 +0100] "GET /.[redacted] HTTP/1.1" 302 5273 0/49 ... show more [redacted] 89.124.104.192 - - [16/Jun/2026:09:00:35 +0100] "GET /.[redacted] HTTP/1.1" 302 5273 0/49692 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" [redacted] 89.124.104.192 - - [16/Jun/2026:09:00:35 +0100] "GET /.[redacted] HTTP/1.1" 302 5273 0/72291 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15" [redacted] 89.124.104.192 - - [16/Jun/2026:09:00:35 +0100] "GET /.[redacted] HTTP/1.1" 302 5273 0/72640 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-06-16 07:56:04 (5 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇬🇧 WebNiraj	2026-06-16 06:11:07 (5 days ago)	(mod_security) mod_security (id:949110) triggered by 89.124.104.192 (NL/The Netherlands/v757123.host ... show more (mod_security) mod_security (id:949110) triggered by 89.124.104.192 (NL/The Netherlands/v757123.hosted-by-vdsina.com): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇫🇷 Baking333	2026-06-16 05:44:26 (5 days ago)	[redacted] 89.124.104.192 - - [16/Jun/2026:06:44:25 +0100] "GET /.[redacted] HTTP/1.1" 302 5308 0/65 ... show more [redacted] 89.124.104.192 - - [16/Jun/2026:06:44:25 +0100] "GET /.[redacted] HTTP/1.1" 302 5308 0/65811 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0" [redacted] 89.124.104.192 - - [16/Jun/2026:06:44:25 +0100] "GET /api/.env HTTP/1.1" 302 5340 0/60692 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-06-16 03:11:35 (5 days ago)	[redacted] 89.124.104.192 - - [16/Jun/2026:04:11:34 +0100] "GET /.[redacted] HTTP/1.1" 302 5333 0/60 ... show more [redacted] 89.124.104.192 - - [16/Jun/2026:04:11:34 +0100] "GET /.[redacted] HTTP/1.1" 302 5333 0/60235 "-" "Mozilla/5.0 (X11; CrOS x86_64 14092.77.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.107 Safari/537.36" [redacted] 89.124.104.192 - - [16/Jun/2026:04:11:34 +0100] "GET /.[redacted] HTTP/1.1" 302 5333 0/57142 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" show less	Bad Web Bot Web App Attack
Anonymous	2026-06-16 01:04:59 (5 days ago)	89.124.104.192 patrz.eu - [16/Jun/2026:03:04:58 +0200] "GET /.env.example HTTP/1.1" 418 710 "-" "Moz ... show more 89.124.104.192 patrz.eu - [16/Jun/2026:03:04:58 +0200] "GET /.env.example HTTP/1.1" 418 710 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/140.0.4 (x64 de)" ... show less	Hacking Web App Attack
🇧🇪 voormedia	2026-06-16 00:10:25 (5 days ago)	Accessed trap at '/.env'	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-15 21:59:06 (5 days ago)	Auto-ban: >3000 req/min op 2026-06-15	Web App Attack SSH Hacking

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 108.178.17.26

🇨🇱 45.177.96.114

🇺🇸 23.234.72.253

🇲🇽 200.68.173.175

🇺🇸 185.226.196.14

🇫🇮 185.148.3.54

🇻🇳 160.30.160.194

🇨🇳 123.117.152.61

🇺🇸 104.210.140.134

🇬🇧 82.15.191.73

🇺🇸 68.83.173.205

🇮🇪 37.228.204.93

🇬🇧 35.203.211.241

🇩🇪 31.18.252.136

🇮🇹 2.38.65.232

🇹🇷 212.87.198.96

🇲🇿 197.219.208.58

🇧🇷 186.233.118.22

🇨🇳 180.184.141.117

🇧🇷 164.152.250.192