89.251.0.142
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- VPN Consumer Toronto, Canada
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS41564
- Domain Name
- vpnconsumer.com
- Country
- 🇨🇦 Canada
- City
- Toronto, Ontario
Abuse Reports
Total reports
185 from
70 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇾 lns.bz |
Too many 404 requests [BY]
|
Web App Attack | |
| 🇺🇦 URAN Publishing Service |
[23/Oct/2026:05:35:43 +0300] -- 89.251.0.142 Ban reason: User-Agent Go-http-client
|
Bad Web Bot Web App Attack | |
| 🇦🇺 AWW-Admin |
(wordpress) Failed wordpress login from 89.251.0.142 (CA/Canada/-)
|
Brute-Force | |
| Anonymous |
WordPress login / xmlrpc probing across multiple sites
|
Web App Attack | |
| 🇩🇪 LRob |
|
Brute-Force Web App Attack | |
| 🇫🇮 YF |
Distributed subnet attack — coordinated scanning from multiple IPs in the same /24
|
DDoS Attack Web App Attack | |
| 🇩🇪 ger-stg-sifi1 |
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
|
Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack | |
| 🇳🇱 WeCloudit-Anti-Abuse |
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
|
Web App Attack Hacking | |
| 🇪🇸 masterguru |
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122)
|
Bad Web Bot | |
| 🇩🇪 LRob |
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-13 19:42 UTC
|
Bad Web Bot | |
| 🇺🇦 URAN Publishing Service |
[09/Sep/2026:17:08:23 +0300] -- 89.251.0.142 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-json/ HTTP/1.1
|
Bad Web Bot Web App Attack | |
| 🇺🇸 LSPCCU |
TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: galah. Context: 89.251.0.142 classified as botnet node participating in coordinated attack campaigns (high confidence).
|
Hacking | |
| 🇩🇪 Oakley |
(confirmed_bot_sig) Confirmed bot
|
Hacking | |
| 🇹🇷 neron |
CrowdSec blocked: http:exploit detected via OPNsense firewall
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown