94.249.89.106

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
30% Elevated
12 reports
8 reporters ยท latest 16 hours ago
ISP
Jordan Telecom Group (Orange)
Usage Type
Fixed Line ISP
ASN
AS8376
Hostname(s)
94.249.x.106.go.com.jo
Domain Name
orange.com
Country
๐Ÿ‡ฏ๐Ÿ‡ด Jordan
City
Amman, Amman
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
12 from 8 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 4 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 3 ๐Ÿ‡จ๐Ÿ‡ฟ Czechia 1
Most common categories Web App Attack 5 Bad Web Bot 5 Brute-Force 4 VPN IP 1 Hacking 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Not following 301 redirects โ€” wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E | 2026-11-12 04:06 UTC
Bad Web Bot
๐Ÿ‡บ๐Ÿ‡ธ TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช LRob
WordPress login brute force | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36 | 2026-11-11 16:52 UTC
Brute-Force Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Not following 301 redirects โ€” wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Bad Web Bot
๐Ÿ‡ฉ๐Ÿ‡ช big-cloud.nl
Try to access /xmlrpc.php
Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ cwytech
Fleet-wide ban from the Ghostfleet ๐Ÿ‘ป. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot Web App Attack
๐Ÿ‡จ๐Ÿ‡ฟ Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
๐Ÿ‡ฌ๐Ÿ‡ง Silly Development
Malicious activity detected from 8376 Jordan Data Communications Company LLC towards host sillydev.co.uk (GET HTTP/2) @ 2026-09-11T11:52:05Z (1 occurrences)
DDoS Attack Exploited Host
๐Ÿ‡ธ๐Ÿ‡ฌ garrymenata
DDoS Attack Bad Web Bot
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Web application probing | req: 4\x86a\xD4l\xA1P\xFF\xE85%\xE64\x9E\xBC\xB1\x11\xFE\x9Ai | 11 distinct paths | UA: -
Port Scan Web App Attack
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ฑ 176.65.149.73
๐Ÿ‡บ๐Ÿ‡ธ 68.225.149.102
๐Ÿ‡จ๐Ÿ‡ด 8.243.69.122
๐Ÿ‡ณ๐Ÿ‡ฑ 213.209.159.228
๐Ÿ‡ณ๐Ÿ‡ฑ 195.178.110.227
๐Ÿ‡ณ๐Ÿ‡ฑ 195.178.110.30
๐Ÿ‡บ๐Ÿ‡ฆ 176.103.15.188
๐Ÿ‡ป๐Ÿ‡ณ 157.20.201.153
๐Ÿ‡ฉ๐Ÿ‡ช 139.19.117.131
๐Ÿ‡ท๐Ÿ‡ด 92.118.39.63
๐Ÿ‡ฎ๐Ÿ‡ณ 52.140.76.154
๐Ÿ‡ฏ๐Ÿ‡ต 43.167.157.80
๐Ÿ‡บ๐Ÿ‡ธ 35.255.106.73
๐Ÿ‡ณ๐Ÿ‡ฑ 200.138.46.39
๐Ÿ‡ต๐Ÿ‡ฐ 137.59.229.60
๐Ÿ‡ซ๐Ÿ‡ฎ 122.8.94.183
๐Ÿ‡ธ๐Ÿ‡ฌ 104.248.157.178
๐Ÿ‡บ๐Ÿ‡ธ 98.250.88.36
๐Ÿ‡ฎ๐Ÿ‡ถ 65.20.213.222
๐Ÿ‡ง๐Ÿ‡ช 34.52.251.89
feedback