JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.200.205.34

89.200.205.34 was found in our database!

This IP was reported 115 times. Confidence of Abuse is 1%: ?

ISP	Duocast B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31477
Domain Name	duocast.nl
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.200.205.34

Whois 89.200.205.34

IP Abuse Reports for 89.200.205.34:

This IP address has been reported a total of 115 times from 22 distinct sources. 89.200.205.34 was first reported on April 15th 2022, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 BetterBotHunter	2026-08-27 08:40:58 (6 days ago)	Triggered honeypot (Better Bot Hunter 3)	Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-06-01 06:35:25 (3 months ago)	Scanning for web/db/file exploits on werkenbij.oktamsterdam.nl	SQL Injection Bad Web Bot Web App Attack
🇦🇺 MAGIC	2026-05-24 02:24:49 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 SCHAPPY	2026-04-05 06:58:06 (4 months ago)	Critical web app attack detected. HTTP header is restricted by policy (/accept-charset/)	Web App Attack
🇮🇩 David Koswari	2026-03-25 06:55:00 (5 months ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇮🇩 Burayot	2026-03-21 00:35:20 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 89.200.205.34 (-): 1 in the last 360 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 89.200.205.34 (-): 1 in the last 3600 secs show less	Web App Attack
🇮🇩 hermawan	2026-03-18 08:40:23 (5 months ago)	2026-03-18T15:40:23.017214+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ... show more 2026-03-18T15:40:23.017214+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=89.200.205.34 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=26942 DF PROTO=TCP SPT=57185 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Email Spam Hacking
Anonymous	2026-03-01 16:06:23 (6 months ago)	Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=6	Hacking
🇪🇸 gnom4ik	2026-02-20 18:02:03 (6 months ago)	ban-reviewer auto report; ip=89.200.205.34; scenario=http:scan; verdict=valid_ban; confidence=0.85; ... show more ban-reviewer auto report; ip=89.200.205.34; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'Port Scan' (category 14) in abuseipdb context; Scan-related scenario ('http:scan') detected; Decision was placed within a short time window (less than 3 days ago) show less	Port Scan Hacking Brute-Force SSH
🇩🇪 Carsten	2026-02-05 13:37:22 (6 months ago)	bad web bot	Bad Web Bot
🇮🇩 hermawan	2026-02-03 15:27:37 (6 months ago)	[Tue Feb 03 22:27:36.492648 2026] [security2:error] [pid 1024516:tid 140537763980992] [client 89.200 ... show more [Tue Feb 03 22:27:36.492648 2026] [security2:error] [pid 1024516:tid 140537763980992] [client 89.200.205.34:59781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "x-gzip" at REQUEST_HEADERS:Accept-Encoding. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "257"] [id "440002"] [msg " Ilegal Encode "] [data "Matched Data: x-gzip found within REQUEST_HEADERS:Accept-Encoding: x-gzip, gzip, deflate request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/"] [unique_id "aYIT6DWTQjbxJn4AfI9tDAAAAAc"] [staklim-malang.info] [staklim-malang.info] top=[1024550] [zwFGFG1eG7Y] [aYIT6DWTQjbxJn4AfI9tDAAAAAc] keep_alive=[0] [2026-02-03 22:27:36.492656] [R:aYIT6DWTQjbxJn4AfI9tDAAAAAc] UA:'Mozilla/5.0 (compatible; OpenindexSpider; +https://www.openindex.io/saas/about-our-spider/)' Host:'staklim-malang.info' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8' Accept-Encoding:'x-gzip, ... show less	Hacking Web App Attack
🇩🇪 Carsten	2026-02-01 10:28:11 (7 months ago)	bad web bot	Bad Web Bot
🇮🇩 Burayot	2026-01-31 17:27:23 (7 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 89.200.205.34 (NL/The Netherlands/-) ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 89.200.205.34 (NL/The Netherlands/-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 HandyTreff.de	2026-01-27 23:34:37 (7 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -20.581 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -20.581 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (compatible; stepstoneCrawlBot; +https://www.thestepstonegroup.com/crawler/) show less	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-01-08 10:39:04 (7 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 89.200.205.34 (NL/The Netherlands/-) ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 89.200.205.34 (NL/The Netherlands/-): 2 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.252

🇸🇬 162.158.163.165

🇨🇳 150.255.248.251

🇺🇸 74.125.182.89

🇺🇸 64.62.197.96

🇺🇸 64.62.156.24

🇺🇸 47.251.70.202

🇳🇱 45.148.10.247

🇿🇼 197.221.232.44

🇷🇺 178.140.129.139

🇺🇸 162.216.150.189

🇫🇮 147.185.133.168

🇨🇳 120.84.194.161

🇵🇰 103.134.0.250

🇮🇩 103.29.185.162

🇺🇸 91.230.168.160

🇳🇱 89.21.67.165

🇲🇾 47.250.53.113

🇺🇸 45.156.129.95

🇺🇸 44.201.218.27