JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.34.17.130

89.34.17.130 was found in our database!

This IP was reported 170 times. Confidence of Abuse is 100%: ?

100%

ISP	Liquid Web B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201682
Domain Name	liquidweb.com
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.34.17.130

Whois 89.34.17.130

IP Abuse Reports for 89.34.17.130:

This IP address has been reported a total of 170 times from 95 distinct sources. 89.34.17.130 was first reported on October 29th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-06-18 04:07:21 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 excill	2026-06-18 03:05:07 (1 day ago)	Honeypot mesh observed 878 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇫🇷 tecnicorioja	2026-06-17 22:01:57 (1 day ago)	wp-login attack [17/Jun/2026:12:30:06	Brute-Force Web App Attack
🇺🇸 jaredrlawson	2026-06-17 11:27:14 (2 days ago)	AEGIS-SIGMA: 3+ confirmed strikes. TCP: TTL=64 WIN=0 MSS=0. Targeting aegis-sigma.com.	Port Scan Hacking Brute-Force
🇫🇷 masterguru	2026-06-17 11:08:17 (2 days ago)	(wordpress) Apache: Failed WordPress login from 89.34.17.130 (NL/The Netherlands/-): 10 in the last ... show more (wordpress) Apache: Failed WordPress login from 89.34.17.130 (NL/The Netherlands/-): 10 in the last 3600 secs (0-201) show less	Hacking
Anonymous	2026-06-17 11:04:48 (2 days ago)	89.34.17.130 - - [17/Jun/2026:12:50:45 +0200] "POST /wp-login.php HTTP/1.1" 200 2847 "https://bluegr ... show more 89.34.17.130 - - [17/Jun/2026:12:50:45 +0200] "POST /wp-login.php HTTP/1.1" 200 2847 "https://bluegrassa.site/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 - - [17/Jun/2026:13:00:58 +0200] "POST /wp-login.php HTTP/1.1" 200 3365 "https://princetakamadoprimaryschool.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 - - [17/Jun/2026:13:00:59 +0200] "POST /wp-login.php HTTP/1.1" 200 2858 "https://princetakamadoprimaryschool.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 - - [17/Jun/2026:13:03:25 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "https://femmestylista.co.bw/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 ... show less	Brute-Force Web App Attack
🇩🇪 bsoft.de	2026-06-17 11:02:35 (2 days ago)	89.34.17.130 - - [17/Jun/2026:13:02:17 +0200] "GET /wp-login.php HTTP/1.1" 404 200032 "https://bolte ... show more 89.34.17.130 - - [17/Jun/2026:13:02:17 +0200] "GET /wp-login.php HTTP/1.1" 404 200032 "https://bolte.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 - - [17/Jun/2026:13:02:33 +0200] "GET /wp-login.php HTTP/1.1" 200 2982 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 - - [17/Jun/2026:13:02:34 +0200] "POST /wp-login.php HTTP/1.1" 200 3135 "https://kgsjw-freunde.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 Jason Howell	2026-06-17 11:01:05 (2 days ago)	89.34.17.130 - - [17/Jun/2026:05:12:45 -0500] "GET /wp-login.php HTTP/1.1" 200 5491 "-" "Mozilla/5.0 ... show more 89.34.17.130 - - [17/Jun/2026:05:12:45 -0500] "GET /wp-login.php HTTP/1.1" 200 5491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 - - [17/Jun/2026:05:12:45 -0500] "GET /wp-login.php HTTP/1.1" 200 5492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 - - [17/Jun/2026:05:12:45 -0500] "POST /wp-login.php HTTP/1.1" 200 1908 "https://www.devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 - - [17/Jun/2026:06:01:04 -0500] "GET /wp-login.php HTTP/1.1" 200 5490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 - - [17/Jun/2026:06:01:04 -0500] "GET /wp-login.php HTTP/1.1" 200 5492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ... show less	Web App Attack
🇺🇸 xxkodedxx	2026-06-17 10:59:55 (2 days ago)	[Zorvexus edge-defense] GET .env / WordPress honeypot probe Trigger: 1× honeypot-get in 10m window. ... show more [Zorvexus edge-defense] GET .env / WordPress honeypot probe Trigger: 1× honeypot-get in 10m window. Active: 10:58:59 UTC Volume: 1 honeypot probe(s) Bait taken: /wp-login.php UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇳🇱 tmiland	2026-06-17 10:59:27 (2 days ago)	(wordpress_login) WordPress Login Attack 89.34.17.130 (US/United States/-): 3 in the last 3600 secs; ... show more (wordpress_login) WordPress Login Attack 89.34.17.130 (US/United States/-): 3 in the last 3600 secs; IP: 89.34.17.130; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 89.34.17.130 - - [17/Jun/2026:12:59:20 +0200] "GET /wp-login.php HTTP/1.1" 200 1936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 - - [17/Jun/2026:12:59:21 +0200] "GET /wp-login.php HTTP/1.1" 200 1936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.34.17.130 - - [17/Jun/2026:12:59:22 +0200] "POST /wp-login.php HTTP/1.1" 200 2069 "https://.*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Brute-Force
🇺🇸 omc	2026-06-17 10:58:06 (2 days ago)	AH01797: Unauthorized file	Bad Web Bot
🇩🇪 todix	2026-06-17 10:57:21 (2 days ago)	Wordpress brute force or spam attempt from 89.34.17.130	Brute-Force
🇳🇱 Site.eu	2026-06-17 10:55:00 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 Kimax	2026-06-17 10:52:23 (2 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇩🇪 FeG Deutschland	2026-06-17 10:46:55 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack

Showing 1 to 15 of 170 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 217.60.195.150

🇰🇷 211.223.107.86

🇺🇸 157.245.141.140

🇩🇪 69.5.169.27

🇺🇸 44.192.49.230

🇺🇸 34.197.70.90

🇫🇮 147.185.133.202

🇵🇱 95.214.53.157

🇫🇮 65.21.150.20

🇳🇱 45.148.10.183

🇺🇸 45.33.109.18

🇬🇧 35.203.211.6

🇯🇵 14.137.237.192

🇺🇸 216.25.89.126

🇭🇰 194.187.178.122

🇬🇧 193.163.125.57

🇵🇪 190.223.60.209

🇧🇴 190.129.122.12

🇨🇴 186.168.55.37

🇺🇸 172.253.210.93