JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.46.106.197

89.46.106.197 was found in our database!

This IP was reported 219 times. Confidence of Abuse is 0%: ?

ISP	Aruba S.p.A. - Shared Hosting IT1
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31034
Hostname(s)	host197-106-46-89.serverdedicati.aruba.it
Domain Name	aruba.it
Country	🇮🇹 Italy
City	Arezzo, Tuscany

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.46.106.197

Whois 89.46.106.197

IP Abuse Reports for 89.46.106.197:

This IP address has been reported a total of 219 times from 80 distinct sources. 89.46.106.197 was first reported on January 11th 2021, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SCHAPPY	2025-08-21 18:34:38 (10 months ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇦🇺 MAGIC	2025-08-16 00:11:06 (10 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 Penny Packer	2025-08-05 09:13:52 (11 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇦🇺 afleventoffice.com.au	2025-07-28 08:01:11 (11 months ago)	HEAD /backup.zip HTTP/1.1	Web App Attack
🇺🇸 lnklnx	2025-07-26 23:29:54 (11 months ago)	www.lincolnclan.com:80 89.46.106.197 - - [26/Jul/2025:18:29:52 -0500] "HEAD /backup.zip HTTP/1.1" 30 ... show more www.lincolnclan.com:80 89.46.106.197 - - [26/Jul/2025:18:29:52 -0500] "HEAD /backup.zip HTTP/1.1" 301 194 "-" "-" ... show less	Web App Attack
Anonymous	2025-07-23 16:33:25 (11 months ago)	Failed login attempt detected by Fail2Ban in recidive jail	Brute-Force
🇩🇪 DocNetzwerk	2025-07-19 09:40:47 (11 months ago)	(mod_security) mod_security triggered on hostname [redacted] 89.46.106.197 (IT/Italy/host197-106-46- ... show more (mod_security) mod_security triggered on hostname [redacted] 89.46.106.197 (IT/Italy/host197-106-46-89.serverdedicati.aruba.it) show less	SQL Injection
🇩🇪 on-com	2025-07-18 18:00:21 (11 months ago)	URL scan	Brute-Force Web App Attack
🇸🇪 SkyDancer	2025-07-18 03:41:04 (11 months ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-07-17 18:26:34 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati ... show more (mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 14:26:27.446759 2025] [security2:error] [pid 24004:tid 24004] [client 89.46.106.197:39192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kurikka.net"] [uri "/wp-config.php.old"] [unique_id "aHlAU8ExaibXXhaWH5Y-dgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-17 11:40:52 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati ... show more (mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 07:40:47.724356 2025] [security2:error] [pid 1697:tid 1709] [client 89.46.106.197:35016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stonyp.com"] [uri "/wp-config.php.old"] [unique_id "aHjhP_-cI3EU8wvO0uj7RAAAAEo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-16 07:05:22 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati ... show more (mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 03:05:13.256413 2025] [security2:error] [pid 1701:tid 1701] [client 89.46.106.197:35740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rimworld.com"] [uri "/wp-config.php1"] [unique_id "aHdPKSovFvLVLYx3QlgByAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-15 10:00:39 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati ... show more (mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 06:00:35.931504 2025] [security2:error] [pid 14404:tid 14408] [client 89.46.106.197:26872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juantrece.com"] [uri "/wp-config.php.old"] [unique_id "aHYmw_ociMF-lh_Civ4MAQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-14 04:21:11 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati ... show more (mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 00:21:06.633369 2025] [security2:error] [pid 11666:tid 11666] [client 89.46.106.197:31510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamesmorris.net"] [uri "/wp-config.php.old"] [unique_id "aHSFsiXYpZabVkn5WxgWbgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-13 17:42:37 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati ... show more (mod_security) mod_security (id:210492) triggered by 89.46.106.197 (host197-106-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 13:42:33.317684 2025] [security2:error] [pid 12078:tid 12078] [client 89.46.106.197:29716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.altruaglobalsolutions.com"] [uri "/wp-config.php1"] [unique_id "aHPwCTZ36cu-MPUONFK--QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 219 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.226.197.37

🇩🇪 69.5.169.125

🇳🇱 62.164.177.222

🇮🇩 203.148.84.6

🇵🇱 194.165.16.165

🇩🇪 193.124.20.244

🇵🇪 190.119.63.98

🇷🇺 188.247.54.50

🇷🇺 185.255.134.111

🇺🇸 185.180.141.42

🇷🇺 178.155.4.182

🇩🇪 167.94.145.18

🇮🇳 167.71.229.198

🇩🇪 164.92.249.85

🇺🇸 162.216.150.95

🇳🇱 160.119.71.136

🇫🇮 147.185.133.83

🇺🇸 146.75.93.91

🇷🇴 141.98.83.48

🇻🇳 123.20.210.116