JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.19.35.50

89.19.35.50 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 21%: ?

21%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.19.35.50

Whois 89.19.35.50

IP Abuse Reports for 89.19.35.50:

This IP address has been reported a total of 9 times from 6 distinct sources. 89.19.35.50 was first reported on August 28th 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-04 12:52:12 (13 hours ago)	(mod_security) mod_security (id:225170) triggered by 89.19.35.50 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 89.19.35.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 08:52:07.801428 2026] [security2:error] [pid 14234:tid 14317] [client 89.19.35.50:10143] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pamper.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pamper.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiF097hm3Hvf8DRahW-w6QAAANM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-05-25 15:40:56 (1 week ago)	Web password guessing	Brute-Force
🇩🇪 LRob.fr	2026-05-15 05:15:09 (2 weeks ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-05-13 04:44:08 (3 weeks ago)	Web password guessing	Brute-Force
🇨🇿 lp	2025-03-15 01:25:09 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 89.19.35.50 2025-03-15T01:50:11+01:00 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 89.19.35.50 2025-03-15T01:50:11+01:00 vpn Access-Reject 'juan' station: 89.19.35.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-02-15 00:43:16 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.19.35.50 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 89.19.35.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 14 19:43:10.306413 2025] [security2:error] [pid 14003:tid 14003] [client 89.19.35.50:21167] [client 89.19.35.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigblue4.us"] [uri "/.env"] [unique_id "Z6_jHnet1eBIo6jzLUXuNgAAAA0"], referer: https://tasamm.com/about/bbb45.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-05 21:54:57 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 89.19.35.50 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 89.19.35.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 05 16:54:51.403905 2025] [security2:error] [pid 31991:tid 31991] [client 89.19.35.50:45557] [client 89.19.35.50] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kingstoneproperties.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kingstoneproperties.com"] [uri "/[email protected]"] [unique_id "Z6PeK24gtM6TyYe_Il-6ZwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 bigscoots.com	2024-10-10 20:51:56 (1 year ago)	(smtpauth) Failed SMTP AUTH login from 89.19.35.50 (US/United States/-): 5 in the last 3600 secs; Po ... show more (smtpauth) Failed SMTP AUTH login from 89.19.35.50 (US/United States/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-10-10 16:34:14 dovecot_login authenticator failed for (aOyA1aC) [89.19.35.50]:13223: 535 Incorrect authentication data (set_id=hi) 2024-10-10 16:34:21 dovecot_login authenticator failed for (r99yc15tV) [89.19.35.50]:30333: 535 Incorrect authentication data (set_id=hi) 2024-10-10 16:34:32 dovecot_login authenticator failed for (PxkFhz0) [89.19.35.50]:31827: 535 Incorrect authentication data (set_id=hi) 2024-10-10 16:34:50 dovecot_login authenticator failed for (GwnSLFO) [89.19.35.50]:30069: 535 Incorrect authentication data (set_id=hi) 2024-10-10 16:51:52 dovecot_login authenticator failed for (VjYWeE) [89.19.35.50]:24871: 535 Incorrect authentication data (set_id=hi) show less	Brute-Force SSH
🇹🇼 nansen su	2024-08-28 23:44:03 (1 year ago)	Firewall Web Interface Login fail: remip="89.19.35.50" user=admin	Brute-Force Exploited Host

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.107

🇹🇼 198.235.24.101

🇺🇸 195.184.76.228

🇺🇸 147.185.132.57

🇨🇳 124.117.194.205

🇧🇬 79.124.62.230

🇩🇪 69.5.169.111

🇧🇷 201.13.64.234

🇺🇸 172.178.115.16

🇸🇪 155.4.244.169

🇺🇸 147.185.132.111

🇭🇰 118.141.20.97

🇨🇳 111.73.0.33

🇲🇼 102.70.66.6

🇫🇷 91.231.89.133

🇷🇺 83.221.193.30

🇺🇸 68.169.41.107

🇺🇸 66.132.195.92

🇳🇱 64.89.162.55

🇺🇸 38.94.176.51