JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.19.34.114

89.19.34.114 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 25%: ?

25%

ISP	NEW-YORK-CUSTOMERS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.19.34.114

Whois 89.19.34.114

IP Abuse Reports for 89.19.34.114:

This IP address has been reported a total of 45 times from 23 distinct sources. 89.19.34.114 was first reported on January 25th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ufn.edu.br	2026-08-08 00:07:55 (2 weeks ago)	Aug 7 21:07:51 wslbvm01 sshd[2596199]: Invalid user apd from 89.19.34.114 port 57415 Aug 7 21:07:5 ... show more Aug 7 21:07:51 wslbvm01 sshd[2596199]: Invalid user apd from 89.19.34.114 port 57415 Aug 7 21:07:54 wslbvm01 sshd[2596213]: Invalid user apd from 89.19.34.114 port 27719 Aug 7 21:07:54 wslbvm01 sshd[2596214]: Invalid user apd from 89.19.34.114 port 56663 ... show less	Brute-Force SSH
🇬🇧 adnscom.net	2026-08-05 21:37:58 (2 weeks ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
🇨🇭 altux	2026-08-05 09:01:18 (2 weeks ago)	2026-08-05T11:01:13.425107alwww1 sshd[1148748]: Invalid user admin from 89.19.34.114 port 20173 2026 ... show more 2026-08-05T11:01:13.425107alwww1 sshd[1148748]: Invalid user admin from 89.19.34.114 port 20173 2026-08-05T11:01:17.857320alwww1 sshd[1148791]: Invalid user Administrator from 89.19.34.114 port 54859 2026-08-05T11:01:17.858386alwww1 sshd[1148792]: Invalid user magento-155950 from 89.19.34.114 port 26921 ... show less	Brute-Force SSH
🇧🇪 Saec	2026-07-09 00:04:01 (1 month ago)	Jarvis auto-ban: CF honeypot path /wp-login.php (2× on saec.me)	Port Scan Web App Attack
🇺🇸 paulo.apoloni	2026-07-08 06:43:57 (1 month ago)	89.19.34.114 - - [08/Jul/2026:03:43:52 -0300] "POST /xmlrpc.php HTTP/1.1" 444 0 "-" "Apache-HttpClie ... show more 89.19.34.114 - - [08/Jul/2026:03:43:52 -0300] "POST /xmlrpc.php HTTP/1.1" 444 0 "-" "Apache-HttpClient/4.5.13 (Java/11.0.31)" 89.19.34.114 - - [08/Jul/2026:03:43:54 -0300] "GET /wp-login.php HTTP/1.1" 444 0 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 89.19.34.114 - - [08/Jul/2026:03:43:55 -0300] "GET /wp-login.php HTTP/1.1" 444 0 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 89.19.34.114 - - [08/Jul/2026:03:43:56 -0300] "GET /wp-login.php HTTP/1.1" 444 0 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 89.19.34.114 - - [08/Jul/2026:03:43:57 -0300] "GET /wp-login.php HTTP/1.1" 444 0 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇨🇭 lufi	2026-07-01 12:00:35 (1 month ago)	2026-07-01T14:00:34+02:00 lufischer04 ids442 2026-07-01 14:00:34 89.19.34.114: blacklisted Pattern: ... show more 2026-07-01T14:00:34+02:00 lufischer04 ids442 2026-07-01 14:00:34 89.19.34.114: blacklisted Pattern: /wp-json ... show less	Web Spam Brute-Force Hacking Web App Attack
🇬🇧 relianoid.com	2026-05-24 14:48:43 (2 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2026-05-14 16:45:24 (3 months ago)	Forum/form spam	Web Spam
🇲🇽 licjperezl	2025-06-10 19:13:09 (1 year ago)	Ataque de diccionario o DDoS en nuestros servicios en linea	Brute-Force
🇮🇳 wizard1411	2025-05-31 02:04:02 (1 year ago)	DDoS and brute force activity detected	Brute-Force SSH
🇮🇳 wizard1411	2025-05-31 02:04:02 (1 year ago)	DDoS and brute force activity detected	Brute-Force SSH
🇮🇳 wizard1411	2025-05-31 02:04:02 (1 year ago)	DDoS and brute force activity detected	Brute-Force SSH
🇮🇳 wizard1411	2025-05-31 02:04:02 (1 year ago)	DDoS and brute force activity detected	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-05-06 05:12:03 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 89.19.34.114 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 89.19.34.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 01:11:57.901187 2025] [security2:error] [pid 613970:tid 613970] [client 89.19.34.114:61873] [client 89.19.34.114] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Lectern II/Savannah Whiskey/Thumbs.db"] [unique_id "aBmaHXXtylB30BhTFW73QQAAAA8"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Lectern%20II/Savannah%20Whiskey/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-20 18:22:17 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.237.150.127

🇺🇸 167.172.203.111

🇺🇸 162.158.155.170

🇰🇷 115.68.208.117

🇵🇹 85.240.193.104

🇫🇷 78.114.47.189

🇺🇸 66.132.224.27

🇷🇺 45.195.221.26

🇨🇳 220.154.131.111

🇺🇿 213.230.92.199

🇲🇽 189.192.91.165

🇩🇪 164.92.176.86

🇷🇴 92.118.39.49

🇰🇷 64.110.90.250

🇱🇹 62.60.130.201

🇮🇱 46.210.94.61

🇩🇪 45.139.104.152

🇨🇳 36.106.167.31

🇹🇭 1.20.174.45

🇺🇸 2604:a940:302:118:0:3c::