JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.43.31.134

89.43.31.134 was found in our database!

This IP was reported 152 times. Confidence of Abuse is 4%: ?

ISP	Netinternet Bilisim Teknolojileri AS
Usage Type	Fixed Line ISP
ASN	AS51559
Hostname(s)	server.guiclientzbot.com
Domain Name	ni.net.tr
Country	🇹🇷 Turkey
City	Denizli, Denizli

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.43.31.134

Whois 89.43.31.134

IP Abuse Reports for 89.43.31.134:

This IP address has been reported a total of 152 times from 28 distinct sources. 89.43.31.134 was first reported on May 13th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-09-17 20:56:54 (2 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: / \| 2026-09-17 20:56 UTC show less	Bad Web Bot
🇷🇺 Agrohim	2026-06-25 21:32:57 (2 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇷🇺 Agrohim	2026-05-29 00:06:32 (3 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇱🇻 garmtech.com	2026-03-13 22:45:25 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-45.89.43.31.134.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-45.89.43.31.134.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇹🇷 crnpekgoz	2026-03-13 11:50:14 (6 months ago)	Mass-registration bot attack. 128+ accounts registering and logging in simultaneously from cloud/pro ... show more Mass-registration bot attack. 128+ accounts registering and logging in simultaneously from cloud/proxy infrastructure. show less	DDoS Attack Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-01 16:22:25 (6 months ago)	(mod_security) mod_security (id:210831) triggered by 89.43.31.134 (server.guiclientzbot.com): 1 in t ... show more (mod_security) mod_security (id:210831) triggered by 89.43.31.134 (server.guiclientzbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 11:22:19.586105 2026] [security2:error] [pid 13475:tid 13475] [client 89.43.31.134:54830] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/usage_202603.html"] [unique_id "aaRnuxF6XB3moSbh-BBgugAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-02-11 18:11:48 (7 months ago)	Blocked by UFW (TCP on 6887) Source port: 47778 TTL: 41 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6887) Source port: 47778 TTL: 41 Packet length: 60 TOS: 0x08 This report (for 89.43.31.134) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-02-09 06:02:09 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 89.43.31.134 (server.guiclientzbot.com): 1 in t ... show more (mod_security) mod_security (id:210730) triggered by 89.43.31.134 (server.guiclientzbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 01:02:02.719564 2026] [security2:error] [pid 21054:tid 21054] [client 89.43.31.134:49422] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|anbruswebdesign.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anbruswebdesign.com"] [uri "/[email protected]"] [unique_id "aYl4WoY4hBqrmgQq5Vu8_QAAAAo"], referer: http://anbruswebdesign.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-03 15:31:47 (7 months ago)	Forum/form spam	Web Spam
🇲🇾 Rizzy	2026-01-14 16:52:05 (8 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-01-09 07:41:29 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 89.43.31.134 (server.guiclientzbot.com): 1 in t ... show more (mod_security) mod_security (id:210730) triggered by 89.43.31.134 (server.guiclientzbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 09 02:41:25.254630 2026] [security2:error] [pid 32016:tid 32016] [client 89.43.31.134:34884] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|qualityelevatorcabs.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "qualityelevatorcabs.com"] [uri "/[email protected]"] [unique_id "aWCxJcENh9BHQVKIlq20JQAAAA4"], referer: http://qualityelevatorcabs.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-09 01:25:52 (9 months ago)		Web App Attack
🇺🇸 gu-alvareza	2025-12-02 07:05:08 (9 months ago)	WordPress.xmlrpc.Pingback.DoS	DDoS Attack
🇳🇱 WeCloudit-Anti-Abuse	2025-10-31 12:20:11 (10 months ago)	WAF: Block IP which is in the web-spammers RBL 2- wsit	Email Spam Brute-Force
Anonymous	2025-09-17 08:37:08 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 152 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇾 178.253.95.167

🇺🇸 98.80.4.73

🇵🇰 72.255.54.1

🇰🇪 197.232.153.1

🇫🇷 173.249.52.138

🇺🇸 147.185.132.143

🇨🇳 106.75.222.86

🇺🇸 52.128.53.134

🇬🇧 35.203.210.149

🇨🇳 210.13.99.66

🇮🇳 182.70.243.207

🇰🇿 176.64.104.161

🇮🇩 157.10.253.224

🇮🇩 103.76.120.87

🇬🇧 87.236.176.209

🇺🇸 5.83.138.189

🇨🇳 222.85.128.244

🇫🇷 213.144.214.240

🇺🇸 172.64.217.57

🇧🇬 109.160.32.38