89.124.88.169

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
27% Elevated
14 reports
14 reporters · latest 1 month ago
ISP
SERVERS TECH FZCO
Usage Type
Data Center/Web Hosting/Transit
ASN
AS216071
Hostname(s)
v1146350.hosted-by-vdsina.com
Domain Name
vdsina.com
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
14 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 6 🇮🇪 Ireland 2 🇦🇺 Australia 1
Most common categories Web App Attack 8 Port Scan 5 Brute-Force 4 Bad Web Bot 4 Hacking 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇺 sel
Web scanner across voxel-frontier: 114 suspicious requests GET /api/.env 502 | GET /.env.production 502 | GET /.env.example 502
Web App Attack Bad Web Bot
🇺🇸 jormaster3k
Attack against Apache (too many 404s)
Web App Attack
🇺🇸 tedmichalik.com
89.124.88.169 - - [19/Sep/2026:02:57:03 -0400] "GET /.env.bak HTTP/1.1" 404 477 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" ...
Web App Attack
🇮🇪 AutosOnShow
blocked for webapp attack | path requested: /.env | seen at 2026-09-19 01:13:26.671 |
Web App Attack
🇨🇦 Read.Team
Automated report: repeat offender across honeypot, portscan, and brute force systems. Score: 8
Port Scan Hacking Web App Attack
🇳🇱 taivas.nl
General_bad_requests
Bad Web Bot
🇺🇸 LSPCCU
TSEC Honeypot Network report. Threat score: 75/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: galah, h0neytr4p. Context: Attacker IP from Amsterdam, The Netherlands.
Port Scan Hacking Brute-Force Web App Attack SSH
🇨🇭 m_vlasov
SSH/Telnet honeypot: 0 login attempts, 0 sessions, 0 shell commands.
Hacking
🇺🇸 seanwall
Automated scanner/attacker probing war-room. Paths: ['/.env', '/.env']. UA: ['Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36']
Port Scan Bad Web Bot Web App Attack
🇺🇸 valornode
Detected by CrowdSec on www.iambrayden.net-47d88224: CrowdSec: crowdsecurity/http-probing | ASN: 216071 (Servers Tech Fzco) | Country: NL | Range: 89.124.64.0/18
Brute-Force SSH
🇬🇧 WebNiraj
*Port Scan* detected from 89.124.88.169 (NL/The Netherlands/host-89-124-88-169.hosted-by-vdsina.com). 11 hits in the last 290 seconds [SIGMA]
Brute-Force Port Scan
🇫🇷 Stara
Port scan detected - multiple connection attempts to various ports
Port Scan Brute-Force SSH
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 89.124.88.169 (host-89-124-88-169.hosted-by-vdsina.com)
SQL Injection
🇺🇸 FreeMyIP
Automated fail2ban report: web application attack / scanning for exploitable paths.
Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 195.63.0.214
🇳🇿 172.196.43.109
🇬🇧 83.106.141.104
🇷🇺 78.155.201.241
🇺🇸 72.180.39.216
🇬🇧 35.203.210.196
🇺🇸 205.210.31.91
🇺🇸 205.210.31.3
🇺🇸 199.165.159.129
🇺🇸 195.63.3.80
🇺🇸 147.185.132.133
🇷🇺 109.72.74.132
🇷🇴 92.118.39.63
🇬🇧 89.37.172.156
🇬🇧 87.236.176.26
🇩🇪 69.5.169.175
🇺🇸 45.131.195.151
🇺🇸 45.79.191.178
🇸🇬 20.157.117.15
🇺🇸 216.180.246.240
feedback