JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.36.6.124

89.36.6.124 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 39%: ?

39%

ISP	PROCONO S.A.
Usage Type	Fixed Line ISP
ASN	AS34977
Domain Name	procono.es
Country	🇪🇸 Spain
City	Ecija, Andalusia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.36.6.124

Whois 89.36.6.124

IP Abuse Reports for 89.36.6.124:

This IP address has been reported a total of 10 times from 10 distinct sources. 89.36.6.124 was first reported on June 5th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-09-17 02:38:54 (19 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
Anonymous	2026-09-11 15:34:10 (6 days ago)	Distributed web scraper targeting /store/filtered/ on saddlebrook.usawinetradersclub.com. Residentia ... show more Distributed web scraper targeting /store/filtered/ on saddlebrook.usawinetradersclub.com. Residential proxy - IP+timestamp provided for ISP DHCP log attribution. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-09-08 23:32:35 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 89.36.6.124 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 89.36.6.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 19:32:29.113953 2026] [security2:error] [pid 23209:tid 23209] [client 89.36.6.124:1589] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|adlc18.mtalame.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "adlc18.mtalame.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqCbDVfcasw1Gnphl2ywhAAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-09-08 18:20:23 (1 week ago)	(wordpress) Failed wordpress login from 89.36.6.124 (ES/Spain/Seville/Écija/-/[redacted]): (CF_ENAB ... show more (wordpress) Failed wordpress login from 89.36.6.124 (ES/Spain/Seville/Écija/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇩🇪 LRob	2026-09-07 16:36:29 (1 week ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-login.php \| 2026-09-07 16:36 UTC show less	Hacking Web App Attack
🇫🇷 Zkillu	2026-08-19 22:29:28 (4 weeks ago)	UDP flood (DDoS) vs AS215599: 1863 pkts / 2.66 MB to UDP 80/8443 across 495 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 1863 pkts / 2.66 MB to UDP 80/8443 across 495 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:29:28 (4 weeks ago)	UDP flood (DDoS) vs AS215599: 1863 pkts / 2.66 MB to UDP 80/8443 across 495 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 1863 pkts / 2.66 MB to UDP 80/8443 across 495 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇰🇷 zlhIcd	2026-06-24 09:11:32 (2 months ago)	89.36.6.124 - - [16/Jun/2026:09:03:30 +0900] "GET /pcwiki/index.php?days=30&from=20251212233213&hide ... show more 89.36.6.124 - - [16/Jun/2026:09:03:30 +0900] "GET /pcwiki/index.php?days=30&from=20251212233213&hideanons=1&hidemyself=1&limit=250&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_2_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.53 Safari/537.36" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack
🇩🇪 botreporter	2026-06-24 00:45:46 (2 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇮🇩 hermawan	2026-06-05 11:08:58 (3 months ago)	[Fri Jun 05 18:08:54.008679 2026] [authz_core:error] [pid 957536:tid 140021527951040] [client 89.36. ... show more [Fri Jun 05 18:08:54.008679 2026] [authz_core:error] [pid 957536:tid 140021527951040] [client 89.36.6.124:1244] AH01630: client denied by server configuration: /var/www/TableFilter/total-v116.js [staklim-malang.info] [staklim-malang.info] top=[957549] [XsGsr/9lWWI] [aiKuRkRnSQVZGjIj2bPOdAAAFAw] keep_alive=[1] [2026-06-05 18:08:54.008683] [R:aiKuRkRnSQVZGjIj2bPOdAAAFAw] UA:'Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Mobile Safari/537.36 (compatible; Google-InspectionTool/1.0)' Host:'staklim-malang.info:443' ACCEPT:'/' Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8 ... show less	Email Spam Hacking

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.231

🇺🇸 172.69.71.213

🇹🇼 124.218.80.61

🇨🇳 119.167.206.194

🇵🇰 119.73.98.223

🇧🇬 79.124.49.62

🇺🇸 74.220.219.216

🇺🇸 54.159.18.27

🇻🇳 42.118.54.27

🇺🇸 34.20.155.2

🇺🇸 205.210.31.37

🇧🇷 186.219.137.142

🇨🇳 182.92.140.185

🇺🇸 178.128.180.178

🇨🇦 172.71.120.52

🇸🇬 172.69.166.82

🇸🇬 172.68.164.93

🇭🇰 162.159.98.47

🇸🇬 152.42.179.66

🇧🇷 136.248.121.226