AbuseIPDB » 89.208.105.220

89.208.105.220 was found in our database!

This IP was reported 113 times. Confidence of Abuse is 94%: ?

94%

ISP	AEZA GROUP Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210644
Hostname(s)	festive-achiever.aeza.network
Domain Name	aeza.net
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 89.208.105.220

Whois 89.208.105.220

IP Abuse Reports for 89.208.105.220:

This IP address has been reported a total of 113 times from 44 distinct sources. 89.208.105.220 was first reported on November 2nd 2024, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
bcsaba	2024-12-25 11:03:00 (1 month ago)	Multiple critical ModSecurity events	Hacking Web App Attack
hermawan	2024-12-24 16:38:16 (1 month ago)	[Mon Dec 23 06:49:36.830201 2024] [security2:error] [pid 403613:tid 125201962149568] [client 89.208. ... show more[Mon Dec 23 06:49:36.830201 2024] [security2:error] [pid 403613:tid 125201962149568] [client 89.208.105.220:52230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/coreruleset-4.9.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "146"] [id "440004"] [msg "Keep Alive Header"] [data "Matched Data: 300 found within REQUEST_HEADERS:Keep-Alive: 300 request_line = GET /media/com_acym/js/modal.min.js HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/media/com_acym/js/modal.min.js"] [unique_id "Z2ilkJKskvSizkZHQguEPgAAAvA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[403698] [axFSiIwNy7M] [Z2ilkJKskvSizkZHQguEPgAAAvA] keep_alive=[0] [2024-12-23 06:49:36.830207] [R:Z2ilkJKskvSizkZHQguEPgAAAvA] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:48.0) Gecko/20100101 Firefox/48.0' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/xml,application/xml,application/xhtml+xml,text/h ... show less	Hacking Web App Attack
Anonymous	2024-12-24 14:53:47 (1 month ago)	wordpress-trap	Web App Attack
barbarella	2024-12-23 20:14:45 (1 month ago)	unauthorized access to Wordpress files (GET /wp-content/plugins/woocommerce-upload-files/js/wcuf-fro ... show moreunauthorized access to Wordpress files (GET /wp-content/plugins/woocommerce-upload-files/js/wcuf-frontend-product-page.js) show less	Hacking Web App Attack
barbarella	2024-12-23 15:49:52 (1 month ago)	unauthorized access to Wordpress files (GET /wp-content/plugins/wp-automatic/css/style.css)	Hacking Web App Attack
Anonymous	2024-12-22 21:09:55 (1 month ago)	wordpress-trap	Web App Attack
backslash	2024-12-22 05:00:11 (1 month ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
Anonymous	2024-12-22 00:30:25 (1 month ago)	wordpress-trap	Web App Attack
Swiptly	2024-12-21 16:14:13 (1 month ago)	Multiple critical ModSecurity events ...	Web Spam Bad Web Bot
Charles	2024-12-21 07:16:54 (1 month ago)	89.208.105.220 - - [21/Dec/2024:15:16:52 +0800] "GET /wp-content/plugins/wp-automatic/css/style.css ... show more89.208.105.220 - - [21/Dec/2024:15:16:52 +0800] "GET /wp-content/plugins/wp-automatic/css/style.css HTTP/1.1" 404 2066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:46.0) Gecko/20100101 Firefox/46.0" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH
Anonymous	2024-12-20 18:42:45 (1 month ago)	wordpress-trap	Web App Attack
JCB	2024-12-19 09:38:00 (1 month ago)	89.208.105.220 - - [19/Dec/2024:08:38:39 +0200] "GET /media/com_acym/js/modal.min.js HTTP/1.1" 404 1 ... show more89.208.105.220 - - [19/Dec/2024:08:38:39 +0200] "GET /media/com_acym/js/modal.min.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" 89.208.105.220 - - [19/Dec/2024:08:39:28 +0200] "GET /media/com_acym/js/modal.min.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:48.0) Gecko/20100101 Firefox/48.0" ... show less	Hacking Web App Attack
Anonymous	2024-12-19 02:18:57 (1 month ago)	wordpress-trap	Web App Attack
barbarella	2024-12-18 13:06:16 (1 month ago)	unauthorized access to Wordpress files (GET /wp-content/plugins/wp-automatic/css/style.css)	Hacking Web App Attack
Anonymous	2024-12-18 04:10:46 (1 month ago)	wordpress-trap	Web App Attack