JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.89.64.85

152.89.64.85 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 100%: ?

100%

ISP	Labtech Systems Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS205654
Hostname(s)	85.64.89.152.huskynetworks.co.uk
Domain Name	labtechsystems.co.in
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Whitehead, Northern Ireland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.89.64.85

Whois 152.89.64.85

IP Abuse Reports for 152.89.64.85:

This IP address has been reported a total of 42 times from 30 distinct sources. 152.89.64.85 was first reported on August 24th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 s@ch@	2026-09-01 06:30:01 (13 hours ago)	Jail: plesk-modsecurity \| Web application attack (Plesk ModSecurity)	Web App Attack
🇳🇱 Site.eu	2026-09-01 00:05:19 (19 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TAY	2026-08-31 23:46:35 (19 hours ago)	152.89.64.85 - - [01/Sep/2026:07:46:26 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 34922 "-" "Mozil ... show more 152.89.64.85 - - [01/Sep/2026:07:46:26 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 152.89.64.85 - - [01/Sep/2026:07:46:28 +0800] "GET /wp-config.php~ HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 152.89.64.85 - - [01/Sep/2026:07:46:29 +0800] "GET /wp-config.php.save HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 152.89.64.85 - - [01/Sep/2026:07:46:31 +0800] "GET /wp-config.php.old HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 152.89.64.85 - - [01/Sep/2026:07:46:33 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Brute-Force
🇺🇸 mnsf	2026-08-31 22:05:15 (21 hours ago)	Abuse Detected (11)	Brute-Force Web App Attack
🇷🇴 clauss	2026-08-31 20:37:36 (22 hours ago)	152.89.64.85 - - [31/Aug/2026:23:37:33 +0300] "GET /.git/config HTTP/1.1" 401 36 "-" "Mozilla/5.0 (W ... show more 152.89.64.85 - - [31/Aug/2026:23:37:33 +0300] "GET /.git/config HTTP/1.1" 401 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 152.89.64.85 - - [31/Aug/2026:23:37:36 +0300] "GET /.git/config HTTP/1.1" 401 36 "http://cpcontacts.roxanaluca.ro/.git/config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 factor1	2026-08-31 19:55:12 (23 hours ago)	CrowdSec at saturn Reports Abuse	Web App Attack
🇺🇸 TAY	2026-08-31 19:24:06 (1 day ago)	152.89.64.85 - - [01/Sep/2026:03:23:42 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 48454 "-" "Mozil ... show more 152.89.64.85 - - [01/Sep/2026:03:23:42 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 152.89.64.85 - - [01/Sep/2026:03:23:45 +0800] "GET /wp-config.php~ HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 152.89.64.85 - - [01/Sep/2026:03:23:48 +0800] "GET /wp-config.php.save HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 152.89.64.85 - - [01/Sep/2026:03:23:51 +0800] "GET /wp-config.php.old HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 152.89.64.85 - - [01/Sep/2026:03:23:56 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 48454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-08-31 19:07:44 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 152.89.64.85 (85.64.89.152.huskynetworks.co.uk) ... show more (mod_security) mod_security (id:210492) triggered by 152.89.64.85 (85.64.89.152.huskynetworks.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 15:07:37.556311 2026] [security2:error] [pid 31947:tid 31947] [client 152.89.64.85:45816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stacyfarm.com"] [uri "/.git/config"] [unique_id "apXQ-URrGk_yNiP2OfHpUAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 18:24:16 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 152.89.64.85 (85.64.89.152.huskynetworks.co.uk) ... show more (mod_security) mod_security (id:210492) triggered by 152.89.64.85 (85.64.89.152.huskynetworks.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 14:24:12.004102 2026] [security2:error] [pid 20722:tid 20722] [client 152.89.64.85:55512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerlessons.net"] [uri "/.git/config"] [unique_id "apXGzFHPssx6fpqaCh89WgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-31 17:57:40 (1 day ago)	[ssd5.kdns.gr] httpd-config-scan: sites=www.hparxo.gr; logs=/var/log/httpd/domains/hparxo.gr.log; sa ... show more [ssd5.kdns.gr] httpd-config-scan: sites=www.hparxo.gr; logs=/var/log/httpd/domains/hparxo.gr.log; samples=/.git/config show less	Hacking Web App Attack
🇩🇪 Vegascosmetics	2026-08-31 16:35:04 (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git) show less	Hacking Brute-Force Web App Attack
🇳🇱 Joop	2026-08-31 16:32:47 (1 day ago)	2026-08-31 18:32:44 +0200 s17 /.git/config	Web App Attack
🇺🇸 Major Hostility	2026-08-31 15:54:28 (1 day ago)	"GET /.git/config HTTP/1.1" 404 "GET /.git/config HTTP/1.1" 404	Web App Attack
🇩🇪 big-cloud.nl	2026-08-31 15:47:19 (1 day ago)	Try to access /.git/config	Web App Attack
Anonymous	2026-08-31 15:06:14 (1 day ago)	apache vulnerability scan	Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.36

🇫🇷 188.92.249.59

🇺🇸 147.185.132.144

🇰🇷 125.131.2.28

🇨🇳 117.34.85.168

🇩🇪 104.207.63.11

🇩🇪 104.207.51.210

🇦🇷 38.254.117.129

🇺🇸 216.26.227.98

🇳🇱 195.178.110.232

🇩🇪 151.123.176.13

🇺🇸 147.185.132.117

🇺🇸 147.185.132.108

🇰🇷 125.188.66.189

🇮🇩 103.113.171.119

🇳🇱 91.92.42.195

🇧🇬 79.124.56.102

🇩🇪 69.5.169.36

🇺🇸 66.132.172.106

🇩🇪 65.111.29.248