JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.90.189.57

164.90.189.57 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.90.189.57

Whois 164.90.189.57

IP Abuse Reports for 164.90.189.57:

This IP address has been reported a total of 31 times from 20 distinct sources. 164.90.189.57 was first reported on October 9th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 etu brutus	2024-10-14 05:06:41 (1 year ago)	164.90.189.57 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇩🇪 guldkage	2024-10-13 14:46:40 (1 year ago)	Unauthorized connection attempt detected from IP address 164.90.189.57 to port 22 (gs1) [I]	Brute-Force Exploited Host
🇦🇪 abusiveIntelligence	2024-10-13 07:40:00 (1 year ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇺🇸 gu-alvareza	2024-10-13 07:05:24 (1 year ago)	Nmap.Script.Scanner	Port Scan
🇫🇷 Faeeth	2024-10-13 06:38:00 (1 year ago)	Multiple hits on Honeypot UID:PTRW50NM46 Port:Http (80)	Brute-Force
Anonymous	2024-10-12 17:04:50 (1 year ago)	HTTP Req: GET /HNAP1 HTTP/1.1 Time: Sat, 12 Oct 2024 19:04:50 +0200 Unauthorised web server access ... show more HTTP Req: GET /HNAP1 HTTP/1.1 Time: Sat, 12 Oct 2024 19:04:50 +0200 Unauthorised web server access and/or looking for web app vulnerabilities. Port 80 User Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/) IP suspected 4 time(s) so far. show less	Hacking Bad Web Bot Web App Attack
Anonymous	2024-10-12 17:04:50 (1 year ago)	HTTP Req: POST /sdk HTTP/1.1 Time: Sat, 12 Oct 2024 19:04:50 +0200 Unauthorised web server access ... show more HTTP Req: POST /sdk HTTP/1.1 Time: Sat, 12 Oct 2024 19:04:50 +0200 Unauthorised web server access and/or looking for web app vulnerabilities. Port 80 441 bytes of POST data, max 400 shown: <soap:Envelope xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Header><operationID>00000001-00000001</operationID></soap:Header><soap:Body><RetrieveServiceContent xmlns="urn:internalvim25"><_this xsi:type="ManagedObjectReference" type="ServiceInstance">ServiceInstance</_this></RetrieveSe... User Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/) IP suspected 4 time(s) so far. show less	Hacking Bad Web Bot Web App Attack
Anonymous	2024-10-12 17:04:50 (1 year ago)	HTTP Req: GET /evox/about HTTP/1.1 Time: Sat, 12 Oct 2024 19:04:50 +0200 Unauthorised web server a ... show more HTTP Req: GET /evox/about HTTP/1.1 Time: Sat, 12 Oct 2024 19:04:50 +0200 Unauthorised web server access and/or looking for web app vulnerabilities. Port 80 User Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/) IP suspected 4 time(s) so far. show less	Hacking Bad Web Bot Web App Attack
Anonymous	2024-10-12 17:04:50 (1 year ago)	HTTP Req: GET /odinhttpcall1728752690 HTTP/1.1 Time: Sat, 12 Oct 2024 19:04:50 +0200 Unauthorised ... show more HTTP Req: GET /odinhttpcall1728752690 HTTP/1.1 Time: Sat, 12 Oct 2024 19:04:50 +0200 Unauthorised web server access and/or looking for web app vulnerabilities. Port 80 User Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/) IP suspected 4 time(s) so far. show less	Hacking Bad Web Bot Web App Attack
🇺🇸 gu-alvareza	2024-10-12 07:05:28 (1 year ago)	Nmap.Script.Scanner	Port Scan
Anonymous	2024-10-11 23:59:00 (1 year ago)	164.90.189.57 - - [12/Oct/2024:01:58:58 +0200] "POST /sdk HTTP/1.1" 403 459 "-" "Mozilla/5.0 (compat ... show more 164.90.189.57 - - [12/Oct/2024:01:58:58 +0200] "POST /sdk HTTP/1.1" 403 459 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Web App Attack
🇹🇷 rtbh.com.tr	2024-10-11 20:53:48 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇭 foobar	2024-10-11 17:16:01 (1 year ago)	SMTP nagging	Email Spam Brute-Force
🇦🇪 abusiveIntelligence	2024-10-11 11:30:00 (1 year ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇺🇸 TPI-Abuse	2024-10-11 07:15:45 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 164.90.189.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 164.90.189.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 11 03:15:40.504947 2024] [security2:error] [pid 16732:tid 16732] [client 164.90.189.57:28009] [client 164.90.189.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|\|F\|2"] [data ".txt.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aandcsolutions.com"] [uri "/nice ports,/Trinity.txt.bak"] [unique_id "ZwjQnI9-Y4eipzpazvkhEgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 163.7.8.79

🇻🇳 116.99.169.172

🇺🇸 45.43.58.76

🇺🇸 23.27.75.154

🇭🇰 20.2.220.152

🇩🇪 213.209.159.228

🇺🇸 199.66.182.232

🇬🇧 178.239.198.83

🇺🇸 172.202.44.182

🇯🇵 160.251.101.169

🇩🇪 140.248.75.94

🇵🇰 101.53.233.127

🇹🇷 94.154.43.228

🇩🇪 94.26.90.114

🇵🇱 94.26.88.14

🇺🇸 74.7.241.47

🇺🇸 72.215.46.114

🇺🇸 64.62.156.227

🇱🇺 46.151.182.222

🇳🇱 2.57.19.128