JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.236.169.205

89.236.169.205 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 15%: ?

15%

ISP	LAN-SERVICES
Usage Type	Fixed Line ISP
ASN	AS15600
Hostname(s)	205-169-236-89.dyn.cable.qlnet.ch
Domain Name	lan-services.nl
Country	🇨🇭 Switzerland
City	Munchenbuchsee, Bern

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.236.169.205

Whois 89.236.169.205

IP Abuse Reports for 89.236.169.205:

This IP address has been reported a total of 3 times from 2 distinct sources. 89.236.169.205 was first reported on October 12th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-15 08:46:25 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 89.236.169.205 (205-169-236-89.dyn.cable.qlnet. ... show more (mod_security) mod_security (id:210350) triggered by 89.236.169.205 (205-169-236-89.dyn.cable.qlnet.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:46:18.948467 2026] [security2:error] [pid 19838:tid 19838] [client 89.236.169.205:50578] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|emhelectric.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emhelectric.com"] [uri "/undelivered message administrator/review undelivered emails"] [unique_id "atCS2g-dQ9jfPbcoYKyIywAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 08:18:39 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 89.236.169.205 (205-169-236-89.dyn.cable.qlnet. ... show more (mod_security) mod_security (id:210350) triggered by 89.236.169.205 (205-169-236-89.dyn.cable.qlnet.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:18:34.628678 2026] [security2:error] [pid 4620:tid 4620] [client 89.236.169.205:51966] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|huntingforebears.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "huntingforebears.com"] [uri "/wp-admin/GD/linkedin/source/index.php"] [unique_id "atCMWvZaK5MZ9ZqAp2b9_QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-10-12 10:41:25 (5 days ago)	[MonOct1212:41:23.2881072026][security2:error][pid3685135:tid3685206][client89.236.169.205:0]ModSecu ... show more [MonOct1212:41:23.2881072026][security2:error][pid3685135:tid3685206][client89.236.169.205:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"globalhorizon.ch\"][uri\"/\"][unique_id\"asy5U1h806DkTDcSm3GlQAAAAUc\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 145.255.10.59

🇵🇰 223.123.42.238

192.168.4.80

🇺🇸 147.185.132.208

🇺🇸 103.143.239.201

🇺🇸 66.132.186.141

🇯🇵 34.146.49.239

🇺🇸 172.236.112.131

🇩🇪 148.153.50.179

🇷🇺 109.173.107.163

🇬🇧 77.67.26.136

🇸🇬 47.128.49.1

🇹🇼 35.185.140.246

🇭🇰 8.210.28.151

🇸🇬 138.2.92.229

🇲🇴 125.31.2.160

🇰🇷 121.142.87.218

🇷🇺 94.243.10.202

🇺🇸 94.228.20.19

🇨🇦 85.217.149.43