JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.25.230.156

89.25.230.156 was found in our database!

This IP was reported 214 times. Confidence of Abuse is 0%: ?

ISP	P4 Sp. z o.o.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31242
Hostname(s)	fobos.studio-it.pl
Domain Name	play.pl
Country	🇵🇱 Poland
City	Jastrzebie Zdroj, Silesia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.25.230.156

Whois 89.25.230.156

IP Abuse Reports for 89.25.230.156:

This IP address has been reported a total of 214 times from 94 distinct sources. 89.25.230.156 was first reported on April 29th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bazter.pro	2026-05-09 21:28:26 (2 months ago)	Auto-Ban [2026-05-10 00:28:22]: CRITICAL: Sensitive files (4); DC: P4 Sp. z o.o. [Paths: 2] \| Detail ... show more Auto-Ban [2026-05-10 00:28:22]: CRITICAL: Sensitive files (4); DC: P4 Sp. z o.o. [Paths: 2] \| Details: Sensitive files/paths: /xmlrpc.php, /xmlrpc.php, /xmlrpc.php, /xmlrpc.php \| 404 errors (2): /xmlrpc.php, /wp-login.php show less	Web App Attack Hacking
🇳🇱 Site.eu	2026-05-08 07:26:03 (2 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-05-07 15:46:14 (2 months ago)	Failed Wordpress Logins	Web App Attack
🇫🇷 SpaceHost-Server	2026-05-06 22:40:47 (2 months ago)		Brute-Force Web App Attack
Anonymous	2026-05-06 06:46:24 (2 months ago)	Failed Wordpress Logins	Web App Attack
🇩🇪 Viveronese	2026-05-05 07:41:39 (2 months ago)	Wordpress vulnerability scanning	Web App Attack
Anonymous	2026-05-05 07:05:15 (2 months ago)	89.25.230.156 - - [05/May/2026:15:05:14 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 ... show more 89.25.230.156 - - [05/May/2026:15:05:14 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; MATP; rv:11.0) like Gecko" ... show less	Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-05-05 06:44:24 (2 months ago)	89.25.230.156 - - [05/May/2026:08:42:47 +0200] "POST /wp-login.php HTTP/1.1" 200 7284 "https://stagi ... show more 89.25.230.156 - - [05/May/2026:08:42:47 +0200] "POST /wp-login.php HTTP/1.1" 200 7284 "https://staging.die-netzialisten.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" 89.25.230.156 - - [05/May/2026:08:44:15 +0200] "POST /wp-login.php HTTP/1.1" 200 8175 "https://die-netzialisten.de/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0)" 89.25.230.156 - - [05/May/2026:08:44:23 +0200] "POST /wp-login.php HTTP/1.1" 200 7282 "https://staging.die-netzialisten.de/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 netclix.gr	2026-05-05 06:35:22 (2 months ago)	(wordpress) Failed wordpress login from 89.25.230.156 (PL/Poland/-): (CF_ENABLE)	Brute-Force
Anonymous	2026-05-05 06:31:27 (2 months ago)	host-ipset-guard auto-report; server=ssd5.kdns.gr; rule=httpd-login-spray-site; count=6/6; duration= ... show more host-ipset-guard auto-report; server=ssd5.kdns.gr; rule=httpd-login-spray-site; count=6/6; duration=72h; scope=ssd5.kdns.gr; country=PL; sites=hparxo.gr; samples=site_wide=true \| distinct_ips=6 \| /wp-login.php show less	Brute-Force Web App Attack
🇫🇷 francoisunix	2026-05-05 06:30:13 (2 months ago)	89.25.230.156 - - [05/May/2026:04:17:04 +0000] "GET /wp-login.php HTTP/1.0" 401 14903 "-" "Mozilla/5 ... show more 89.25.230.156 - - [05/May/2026:04:17:04 +0000] "GET /wp-login.php HTTP/1.0" 401 14903 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 89.25.230.156 - - [05/May/2026:04:17:05 +0000] "POST /wp-login.php HTTP/1.0" 401 15353 "https://tagaz.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 89.25.230.156 - - [05/May/2026:05:24:04 +0000] "GET /wp-login.php HTTP/1.0" 401 14903 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/7.0)" 89.25.230.156 - - [05/May/2026:05:24:04 +0000] "POST /wp-login.php HTTP/1.0" 401 15354 "https://tagaz.fr/wp-login.php" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/7.0)" 89.25.230.156 - - [05/May/2026:06:30:11 +0000] "POST /xmlrpc.php HTTP/1.0" 401 413 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.339 ... show less	Web App Attack
🇺🇸 mind5t0rm	2026-05-05 06:24:03 (2 months ago)	(WPLOGIN) WP Login Attack 89.25.230.156 (PL/Poland/-): 3 in the last 3600 secs; Ports: ; Direction: ... show more (WPLOGIN) WP Login Attack 89.25.230.156 (PL/Poland/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 89.25.230.156 - - [05/May/2026:12:32:17 +0700] "GET /wp-login.php HTTP/2.0" 200 3122 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Edge/16.16299" 89.25.230.156 - - [05/May/2026:12:32:20 +0700] "POST /wp-login.php HTTP/2.0" 200 4153 "https://thevasilis.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Edge/16.16299" 89.25.230.156 - - [05/May/2026:13:24:01 +0700] "GET /wp-login.php HTTP/2.0" 200 2686 "https://www.greekthai.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" show less	Port Scan
🇺🇸 ambor	2026-05-05 04:11:44 (2 months ago)	L0ss Honeypot: WordPress login access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇪🇸 SweetHoneyPress	2026-05-05 03:57:22 (2 months ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=611807 \| UA: Mozilla/5.0 (Windows NT 6.1; WOW64; ... show more WordPress honeypot: POST to /xmlrpc.php \| event_id=611807 \| UA: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; TNJB; rv:11.0) like Gecko show less	Web App Attack Brute-Force
🇩🇪 Click-Networks	2026-05-05 03:08:53 (2 months ago)		Web Spam Brute-Force Exploited Host

Showing 1 to 15 of 214 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.85.253

🇺🇸 71.6.134.234

🇺🇸 3.209.174.110

🇵🇭 2001:fd8:cb62:3f00:c36:c7c8:f684:4cd1

🇦🇷 201.179.177.253

🇴🇲 188.135.27.125

🇮🇳 103.159.85.123

🇳🇱 85.11.167.154

🇺🇸 72.240.83.53

🇬🇧 35.203.210.199

🇲🇾 172.197.216.248

🇺🇸 161.153.97.99

🇳🇱 91.92.40.27

🇧🇬 79.124.56.238

🇱🇹 62.60.130.219

🇳🇱 2001:67c:e60:c0c:192:42:116:101

🇨🇴 177.254.20.153

🇨🇳 139.170.73.227

🇮🇪 20.238.37.251

🇩🇪 213.209.159.25