JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.124.70.92

89.124.70.92 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 0%: ?

ISP	SERVERS TECH FZCO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS216071
Domain Name	vdsina.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.124.70.92

Whois 89.124.70.92

IP Abuse Reports for 89.124.70.92:

This IP address has been reported a total of 25 times from 22 distinct sources. 89.124.70.92 was first reported on April 10th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-04-20 22:38:55 (2 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-04-19 22:28:45 (2 months ago)		Brute-Force Web App Attack
🇦🇹 urnilxfgbez	2026-04-18 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 RAP	2026-04-18 07:40:28 (2 months ago)	2026-04-18 07:40:28 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇩🇪 Viveronese	2026-04-18 07:33:49 (2 months ago)	SSH brute force attacks	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-04-18 07:31:33 (2 months ago)	(mod_security) mod_security (id:218420) triggered by 89.124.70.92 (v592972.hosted-by-vdsina.com): 1 ... show more (mod_security) mod_security (id:218420) triggered by 89.124.70.92 (v592972.hosted-by-vdsina.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 03:31:27.255099 2026] [security2:error] [pid 1274783:tid 1274783] [client 89.124.70.92:34084] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.6:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.6"] [uri "/hello.world"] [unique_id "aeMzTwvQJYlcE2bk_bWsEQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 Threat.live	2026-04-18 07:30:03 (2 months ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 ipcop.net	2026-04-18 07:28:21 (2 months ago)	Apr 18 09:26:46 bongen-tmp-rt.local sshd[189169]: Connection closed by authenticating user admin 89. ... show more Apr 18 09:26:46 bongen-tmp-rt.local sshd[189169]: Connection closed by authenticating user admin 89.124.70.92 port 54822 [preauth] Apr 18 09:27:17 bongen-tmp-rt.local sshd[189265]: Invalid user orangepi from 89.124.70.92 port 55052 Apr 18 09:27:17 bongen-tmp-rt.local sshd[189265]: Connection closed by invalid user orangepi 89.124.70.92 port 55052 [preauth] Apr 18 09:27:50 bongen-tmp-rt.local sshd[189275]: Connection closed by authenticating user root 89.124.70.92 port 44010 [preauth] Apr 18 09:28:21 bongen-tmp-rt.local sshd[189367]: Connection closed by authenticating user root 89.124.70.92 port 57186 [preauth] show less	Brute-Force
🇩🇪 paissangroup	2026-04-18 07:27:43 (2 months ago)	Multiple WAF Violations	Web App Attack
🇦🇹 vikal	2026-04-18 07:14:14 (2 months ago)	89.124.70.92 - - [18/Apr/2026:09:14:14 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.p ... show more 89.124.70.92 - - [18/Apr/2026:09:14:14 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 189 "-" "libredtail-http" ... show less	Brute-Force SSH
🇭🇺 Bercy	2026-04-18 06:58:27 (2 months ago)	2026-04-18T08:57:33.950543+02:00 gigacity.eu sshd[328330]: Failed password for invalid user admin fr ... show more 2026-04-18T08:57:33.950543+02:00 gigacity.eu sshd[328330]: Failed password for invalid user admin from 89.124.70.92 port 50048 ssh2 2026-04-18T08:58:24.617418+02:00 gigacity.eu sshd[328430]: Invalid user orangepi from 89.124.70.92 port 37276 2026-04-18T08:58:24.621943+02:00 gigacity.eu sshd[328430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.124.70.92 2026-04-18T08:58:26.356768+02:00 gigacity.eu sshd[328430]: Failed password for invalid user orangepi from 89.124.70.92 port 37276 ssh2 ... show less	Brute-Force SSH
🇨🇿 ICT KnTl	2026-04-18 06:50:47 (2 months ago)	Apr 18 08:49:42 proxy sshd[570668]: Invalid user admin from 89.124.70.92 port 54238 Apr 18 08:50:15 ... show more Apr 18 08:49:42 proxy sshd[570668]: Invalid user admin from 89.124.70.92 port 54238 Apr 18 08:50:15 proxy sshd[570670]: Invalid user orangepi from 89.124.70.92 port 60392 Apr 18 08:50:47 proxy sshd[570700]: User root from 89.124.70.92 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇩🇪 nohacefaltapapel-et.net	2026-04-18 06:50:32 (2 months ago)	2026-04-18T06:45:39.535587cb1 sshd[11943]: Invalid user admin from 89.124.70.92 port 46016 2026-04-1 ... show more 2026-04-18T06:45:39.535587cb1 sshd[11943]: Invalid user admin from 89.124.70.92 port 46016 2026-04-18T06:46:17.126974cb1 sshd[12001]: Invalid user orangepi from 89.124.70.92 port 55070 2026-04-18T06:50:31.804524cb1 sshd[12352]: Invalid user test from 89.124.70.92 port 33692 ... show less	Brute-Force SSH
🇩🇪 NetWatch	2026-04-18 06:27:41 (2 months ago)	The IP 89.124.70.92 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇦🇹 urnilxfgbez	2026-04-10 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.151

🇺🇸 44.215.219.236

🇸🇪 2a04:4e40:4400:0:e0:7afc:67a3:a547

🇺🇸 216.25.89.90

🇺🇸 104.207.42.54

🇩🇪 92.209.216.102

🇺🇸 73.21.28.14

🇻🇪 45.197.194.11

🇳🇱 45.148.10.157

🇱🇺 44.161.85.13

🇰🇷 222.239.251.12

🇩🇪 213.209.159.227

🇨🇭 209.99.184.120

🇧🇬 79.124.62.230

🇩🇪 69.5.169.25

🇵🇰 39.34.188.217

🇬🇧 35.203.210.121

🇷🇴 2.57.121.25

🇺🇸 2a00:1450:4864:20::52d

🇩🇪 213.209.159.226