JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 148.113.214.89

148.113.214.89 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	OVH Hosting, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ns5035255.ip-148-113-214.net
Domain Name	ovh.net
Country	🇨🇦 Canada
City	Beauharnois, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 148.113.214.89

Whois 148.113.214.89

IP Abuse Reports for 148.113.214.89:

This IP address has been reported a total of 15 times from 13 distinct sources. 148.113.214.89 was first reported on April 28th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-01-28 18:20:31 (5 months ago)	(mod_security) mod_security (id:218420) triggered by 148.113.214.89 (ns5035255.ip-148-113-214.net): ... show more (mod_security) mod_security (id:218420) triggered by 148.113.214.89 (ns5035255.ip-148-113-214.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 28 13:20:27.545530 2026] [security2:error] [pid 22559:tid 22559] [client 148.113.214.89:49728] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:-d allow_url_include=1 -d auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|www.inspiringindividualindustry.com\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:-d allow_url_include=1 -d auto_prepend_file=php://input: -d allow_url_include=1 -d auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.inspiringindividualindustry.com"] [uri "/"] [unique_id "aXpTawqP0mGjhAhBasoW0gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-01-27 20:30:18 (5 months ago)	PHP CGI-bin vulnerability attempt.	Web App Attack
🇫🇷 Baking333	2026-01-27 20:22:49 (5 months ago)	[redacted] 148.113.214.89 - - [27/Jan/2026:21:22:46 +0100] "POST /cgi-bin/php?-d+allow_url_include%3 ... show more [redacted] 148.113.214.89 - - [27/Jan/2026:21:22:46 +0100] "POST /cgi-bin/php?-d+allow_url_include%3Don+-d+safe_mode%3Doff+-d+[redacted]%3Don+-d+disable_functions%3D%22%22+-d+open_basedir%3Dnone+-d+auto_prepend_file%3Dphp%3A%2F%2Finput+-d+cgi.force_redirect%3D0+-d+cgi.redirect_status_env%3D0+-n HTTP/1.1" 301 4458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 148.113.214.89 - - [27/Jan/2026:21:22:47 +0100] "GET /fr/cgi-bin/php/?-d%20allow_url_include=on%20-d%20safe_mode=off%20-d%[redacted]=on%20-d%20disable_functions=%20-d%20open_basedir=none%20-d%20auto_prepend_file=php://input%20-d%20cgi.force_redirect=0%20-d%20cgi.redirect_status_env=0%20-n HTTP/2.0" 404 25889 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-01-27 16:31:20 (5 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇩🇪 mygcode.de	2026-01-17 05:48:17 (6 months ago)	Scanning for Exploits	Bad Web Bot
Anonymous	2026-01-17 05:04:38 (6 months ago)	Web App Attack	Brute-Force Web App Attack
🇦🇺 2000cn.com.au	2026-01-16 22:45:04 (6 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/CVE-2017-9841	Web App Attack
🇦🇺 2000cn.com.au	2026-01-14 05:35:04 (6 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/CVE-2017-9841	Web App Attack
🇧🇷 ufn.edu.br	2025-12-25 08:04:11 (6 months ago)	[Thu Dec 25 06:04:10.375754 2025] [access_compat:error] [pid 8512] [client 148.113.214.89:57809] AH0 ... show more [Thu Dec 25 06:04:10.375754 2025] [access_compat:error] [pid 8512] [client 148.113.214.89:57809] AH01797: client denied by server configuration: /var/www/html/adminer-4.3.0.php, referer: http://ws12vmsma01.ufn.edu.br/ [Thu Dec 25 06:04:10.394001 2025] [access_compat:error] [pid 17155] [client 148.113.214.89:57819] AH01797: client denied by server configuration: /var/www/html/adminer-4.3.0-mysql-en.php, referer: http://ws12vmsma01.ufn.edu.br/ [Thu Dec 25 06:04:10.414091 2025] [access_compat:error] [pid 8513] [client 148.113.214.89:57826] AH01797: client denied by server configuration: /var/www/html/adminer-4.3.1.php, referer: http://ws12vmsma01.ufn.edu.br/ ... show less	Exploited Host Web App Attack
Anonymous	2025-12-15 15:10:44 (7 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack
Anonymous	2025-12-10 10:32:48 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇧🇷 csirtsatc	2025-12-09 10:13:00 (7 months ago)	PHPUnit.Eval-stdin.PHP.Remote.Code.Execution.	Hacking Web App Attack
🇧🇷 SvrAdmin	2025-12-08 04:57:17 (7 months ago)	[204] (cpanel) Failed cPanel login from 148.113.214.89 (CA/Canada/ns5035255.ip-148-113-214.net): 5 i ... show more [204] (cpanel) Failed cPanel login from 148.113.214.89 (CA/Canada/ns5035255.ip-148-113-214.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: 148.113.214.89 - admin [12/08/2025:04:57:01 -0000] "POST" FAILED LOGIN cpdavd: Could not fetch system home directory for admin 148.113.214.89 - admin [12/08/2025:04:57:04 -0000] "GET" FAILED LOGIN cpdavd: Could not fetch system home directory for admin 148.113.214.89 - root [12/08/2025:04:57:06 -0000] "GET" FAILED LOGIN cpdavd: UID 0 is below minimum of 1000 148.113.214.89 - adm [12/08/2025:04:57:09 -0000] "GET" FAILED LOGIN cpdavd: UID 3 is below minimum of 1000 148.113.214.89 - administrator [12/08/2025:04:57:11 -0000] "GET" FAILED LOGIN cpdavd: Could not fetch system home directory for administrator show less	Port Scan Hacking Brute-Force Exploited Host
🇧🇷 SOC RNP	2025-08-03 17:53:00 (11 months ago)	Cookie: TS017203c4=01b52898eb214e7ded2b07b8672a4f48e2ce156e45617b6ee0b887b6aacd0429d98b23554b0853d86 ... show more Cookie: TS017203c4=01b52898eb214e7ded2b07b8672a4f48e2ce156e45617b6ee0b887b6aacd0429d98b23554b0853d866c0d5e042bc4c8216131224548ffa447955d2e39a649edf282149d48d42c5e73d119649f02a8d1762286f4d49; csrftoken=kOXV63iSUK81iB3Pe7ZtMaSCEH4EfP8J; sessionid=(select(0)from(select(sleep(15)))v)/'%2B(select(0)from(select(sleep(15)))v)%2B'"%2B(select(0)from(select(sleep(15)))v)%2B"/ show less	Hacking SQL Injection Exploited Host
🇧🇷 SOC RNP	2025-04-28 11:38:00 (1 year ago)	SQL Injection	SQL Injection Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 163.223.9.188

🇷🇴 92.118.39.71

🇳🇱 89.248.172.11

🇷🇴 80.94.92.179

🇧🇬 79.124.62.230

🇹🇭 1.20.174.26

🇺🇸 172.202.117.125

🇻🇳 157.66.26.151

🇧🇩 103.190.205.146

🇧🇫 102.178.154.129

🇸🇬 84.75.155.154

🇱🇹 62.60.130.219

🇳🇱 45.148.10.147

🇬🇧 45.89.242.168

🇵🇪 38.250.161.48

🇦🇪 2.49.8.55

🇮🇪 207.254.22.207

🇧🇷 189.84.221.77

🇳🇱 185.242.226.73

🇨🇳 183.141.161.10