AbuseIPDB » 89.208.105.220

89.208.105.220 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 68%: ?

68%

ISP	AEZA GROUP Ltd
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	festive-achiever.aeza.network
Domain Name	aeza.net
Country	Germany
City	Frankfurt am Main, Hesse

Report 89.208.105.220

Whois 89.208.105.220

IP Abuse Reports for 89.208.105.220:

This IP address has been reported a total of 48 times from 24 distinct sources. 89.208.105.220 was first reported on November 2nd 2024, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Cookie	2024-12-13 15:00:33 (3 hours ago)	Blocked by UFW (TCP on port 80). Source port: 40494 TTL: 51 Packet length: 60<br / ... show moreBlocked by UFW (TCP on port 80). Source port: 40494 TTL: 51 Packet length: 60 TOS: 0x00 Timestamp: 2024-12-13 15:00:33 [Europe/Warsaw] This report (for 89.208.105.220) was generated by: https://github.com/sefinek24/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
JCB	2024-12-09 09:10:00 (4 days ago)	89.208.105.220 - - [09/Dec/2024:04:23:06 +0200] "GET /media/com_acym/js/modal.min.js HTTP/1.1" 404 1 ... show more89.208.105.220 - - [09/Dec/2024:04:23:06 +0200] "GET /media/com_acym/js/modal.min.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:48.0) Gecko/20100101 Firefox/48.0" show less	Web App Attack
octageeks.com	2024-12-09 05:08:08 (4 days ago)	Wordpress malicious attack:[octascan]	Web App Attack
Anonymous	2024-12-03 02:26:13 (1 week ago)	wordpress-trap	Web App Attack
buusbudde.dk	2024-12-01 16:59:39 (1 week ago)	[Sun Dec 01 17:59:38.577317 2024] [security2:error] [pid 1749262:tid 1749262] [client 89.208.105.220 ... show more[Sun Dec 01 17:59:38.577317 2024] [security2:error] [pid 1749262:tid 1749262] [client 89.208.105.220:48640] [client 89.208.105.220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "Z0yV-k5eT2SBWyeUhlZmEwAAAAY"] [Sun Dec 01 17:59:38.892069 2024] [security2:error] [pid 2647475:tid 2647475] [client 89.208.105.220:48652] [client 89.208.105.220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [se ... show less	Web App Attack
cusezar.com	2024-11-30 10:00:25 (1 week ago)	89.208.105.220 /wp-content/plugins/woocommerce-upload-files/js/wcuf-frontend-product-page.js	Brute-Force
Anonymous	2024-11-29 02:24:59 (2 weeks ago)	wordpress-trap	Web App Attack
Anonymous	2024-11-26 02:36:04 (2 weeks ago)	wordpress-trap	Web App Attack
Anonymous	2024-11-25 05:56:01 (2 weeks ago)	wordpress-trap	Web App Attack
JCB	2024-11-23 14:04:00 (2 weeks ago)	89.208.105.220 - - [22/Nov/2024:20:08:41 +0200] "GET /media/com_acym/js/modal.min.js HTTP/1.1" 404 1 ... show more89.208.105.220 - - [22/Nov/2024:20:08:41 +0200] "GET /media/com_acym/js/modal.min.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:49.0) Gecko/20100101 Firefox/49.0" show less	Web App Attack
Anonymous	2024-11-22 02:03:21 (3 weeks ago)	wordpress-trap	Web App Attack
MAGIC	2024-11-21 05:01:10 (3 weeks ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Cookie	2024-11-19 08:01:14 (3 weeks ago)	Blocked by UFW (TCP on port 80). Source port: 41430 TTL: 53 Packet length: 60<br / ... show moreBlocked by UFW (TCP on port 80). Source port: 41430 TTL: 53 Packet length: 60 TOS: 0x00 Timestamp: 2024-11-19 08:01:14 [Europe/Warsaw] This report (for 89.208.105.220) was generated by: https://github.com/sefinek24/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2024-11-15 05:48:22 (4 weeks ago)	wordpress-trap	Web App Attack
Anonymous	2024-11-11 20:45:25 (1 month ago)	TIPSDE WEBEXPLOIT 89.208.105.220 (festive-achiever.aeza.network)	Web App Attack