JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.5.193.89

213.5.193.89 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 16%: ?

16%

ISP	ISP Syndicate
Usage Type	Fixed Line ISP
ASN	AS50012
Domain Name	syndicate.net.ua
Country	🇺🇦 Ukraine
City	Radekhiv, Lviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.5.193.89

Whois 213.5.193.89

IP Abuse Reports for 213.5.193.89:

This IP address has been reported a total of 11 times from 8 distinct sources. 213.5.193.89 was first reported on May 18th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-22 20:27:04 (22 hours ago)	(mod_security) mod_security (id:210350) triggered by 213.5.193.89 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 213.5.193.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 16:26:57.072490 2026] [security2:error] [pid 21868:tid 21868] [client 213.5.193.89:65438] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|n3fjp.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "n3fjp.com"] [uri "/"] [unique_id "atpxkbC8YTSmhvmZbOiFWwAAAAo"], referer: https://w2lj.blogspot.com/2021/02/my-feelings-about-now.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-26 00:47:46 (1 month ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇺🇸 xmission.com	2026-08-25 15:42:08 (1 month ago)	Blocked by UFW (TCP on 23) Source port: 43642 TTL: 56 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 43642 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 213.5.193.89) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇸🇬 garrymenata	2026-08-23 22:45:12 (1 month ago)	213.5.193.89 - - [24/Aug/2026:01:23:26 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; ... show more 213.5.193.89 - - [24/Aug/2026:01:23:26 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 213.5.193.89 - - [24/Aug/2026:01:23:28 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 213.5.193.89 - - [24/Aug/2026:01:23:29 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇫🇷 Zkillu	2026-08-20 19:10:36 (2 months ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS215599. This IP (AS50012) sent ~183 packets (0.01 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇺🇸 鬼影233	2026-08-20 14:11:24 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 20:44:36 (2 months ago)	UDP flood (DDoS) vs AS215599: 44 pkts / 0.06 MB to UDP 80/8443 across 41 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 44 pkts / 0.06 MB to UDP 80/8443 across 41 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 HaloAgencySAS	2026-08-19 20:44:36 (2 months ago)	UDP flood (DDoS) vs AS215599: 44 pkts / 0.06 MB to UDP 80/8443 across 41 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 44 pkts / 0.06 MB to UDP 80/8443 across 41 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 RAP	2026-08-13 12:47:13 (2 months ago)	2026-08-13 12:47:13 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-05-23 18:49:39 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-05-18 06:29:37 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 201.218.150.122

🇿🇼 197.221.232.44

🇬🇧 188.240.59.21

🇧🇷 177.104.71.36

🇧🇷 136.248.121.226

🇨🇳 121.46.244.20

🇺🇸 74.101.28.155

🇺🇸 66.132.186.141

🇺🇸 23.234.93.182

🇩🇪 5.231.242.29

🇨🇴 181.189.17.10

🇵🇰 165.99.207.153

🇺🇸 135.148.217.213

🇮🇳 110.225.241.78

🇦🇴 105.172.82.142

🇰🇪 102.205.48.120

🇷🇺 85.173.132.48

🇬🇧 77.67.26.89

🇳🇱 45.156.87.16

🇬🇧 45.135.142.79