JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.251.0.136

89.251.0.136 was found in our database!

This IP was reported 163 times. Confidence of Abuse is 58%: ?

58%

ISP	VPN Consumer Toronto, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41564
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.251.0.136

Whois 89.251.0.136

IP Abuse Reports for 89.251.0.136:

This IP address has been reported a total of 163 times from 61 distinct sources. 89.251.0.136 was first reported on February 13th 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-03-02 11:28:20 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-03-02 10:01:12 (3 months ago)	89.251.0.136 - - [02/Mar/2026:12:01:11 +0200] "GET /wp-content/hello.php HTTP/1.1" 404 276 "-" "Mozi ... show more 89.251.0.136 - - [02/Mar/2026:12:01:11 +0200] "GET /wp-content/hello.php HTTP/1.1" 404 276 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 89.251.0.136 - - [02/Mar/2026:12:01:11 +0200] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 404 276 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" ... show less	Web App Attack
🇳🇿 Antinson	2026-03-01 17:11:02 (3 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
Anonymous	2026-03-01 11:06:14 (3 months ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (956/60 min)'; Requests=956	Port Scan
🇫🇷 Octopuce	2026-02-28 22:39:49 (3 months ago)	Aggressive web search of vulnerable pages: /css/admin.php /adminfuns.php /wp-admin/css/autoload_clas ... show more Aggressive web search of vulnerable pages: /css/admin.php /adminfuns.php /wp-admin/css/autoload_classmap.php /wp_wlx.php /wp-admin/js/wp-conflg ... show less	Web App Attack
🇫🇷 dynamix	2026-02-28 14:24:40 (3 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-02-28 02:33:04 (3 months ago)	Bot / scanning and/or hacking attempts: GET /admin/controller/extension/extension/ HTTP/1.1, GET /ho ... show more Bot / scanning and/or hacking attempts: GET /admin/controller/extension/extension/ HTTP/1.1, GET /home/ HTTP/1.1, GET /blog/wp-includes/ HTTP/1.1, GET /admin/editor/ HTTP/1.1, GET /modules/ HTTP/1.1, GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1, GET /include/ HTTP/1.1, GET /administrator/ HTTP/1.1, GET /cgi-bin/ HTTP/1.1, GET /wp-includes/blocks/ HTTP/1.1, GET /ALFA_DATA/alfacgiapi/ HTTP/1.1, GET /assets/ HTTP/1.1, GET /admin/uploads/ HTTP/1.1, GET /components/ HTTP/1.1, GET /wordpress/wp-includes/ HTTP/1.1, GET /wp-content/uploads/2021/ HTTP/1.1, GET /admin/uploads/images/ HTTP/1.1, GET /Admin/uploads/ HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 dynamix	2026-02-27 00:04:16 (3 months ago)	Multiple WAF Violations	Web App Attack
🇳🇿 Antinson	2026-02-26 12:55:46 (3 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
Anonymous	2026-02-25 08:35:52 (3 months ago)	WordPress/Woo probe	Web App Attack
🇳🇿 Antinson	2026-02-24 21:21:22 (3 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇫🇮 gnom4ik	2026-02-21 18:51:22 (3 months ago)	ban-reviewer auto report; ip=89.251.0.136; scenario=http:scan; verdict=valid_ban; confidence=0.85; c ... show more ban-reviewer auto report; ip=89.251.0.136; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for HTTP scanning activity (scenario: http:scan); Decision duration of 7980 minutes (approx 5.5 days) suggests sustained threat; AbuseIPDB categories 14 (Port Scan), 15 (Hacking), 18 (Brute-Force), 22 (SSH) are relevant show less	Port Scan Hacking Brute-Force SSH
🇺🇦 URAN Publishing Service	2026-02-05 09:08:18 (3 months ago)	89.251.0.136 - - [05/Feb/2026:11:07:20 +0200] "GET //wp-admin/js/index.php HTTP/1.1" 404 274 "-" "Go ... show more 89.251.0.136 - - [05/Feb/2026:11:07:20 +0200] "GET //wp-admin/js/index.php HTTP/1.1" 404 274 "-" "Go-http-client/1.1" 89.251.0.136 - - [05/Feb/2026:11:08:17 +0200] "GET //wp-includes/images/wp-conflg.php?p= HTTP/1.1" 404 274 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 myagent.site	2026-02-02 07:29:54 (4 months ago)	Blocking for trying to access an exploit file: /themes/pridmag/	Hacking
🇳🇿 Antinson	2026-01-29 23:22:54 (4 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot

Showing 76 to 90 of 163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.106

🇳🇱 192.142.24.43

🇩🇪 172.71.172.30

🇺🇸 47.251.168.209

🇨🇳 42.180.4.166

🇺🇸 23.153.72.82

🇳🇱 191.101.113.198

🇦🇪 107.155.60.67

🇧🇾 95.46.24.101

🇳🇱 89.233.107.97

🇺🇸 54.172.102.189

🇳🇱 45.148.10.147

🇺🇸 208.84.100.50

🇳🇱 185.93.89.110

🇮🇳 125.21.53.232

🇰🇷 106.246.89.69

🇺🇸 76.74.150.109

🇺🇸 20.163.32.224

🇵🇱 194.180.49.217

🇪🇸 188.164.195.116