Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
5.189.157.228 has been reported 184
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
IP Abuse Reports for 5.189.157.228:
This IP address has been reported a total of
184
times from
130 distinct
sources.
5.189.157.228 was first reported on
, and the most recent report was
.
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/5.189.157.228
2026-04- ...
show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/5.189.157.228
2026-04-27 13:30:21 /.env
2026-04-27 14:05:19 /.env
2026-04-27 13:34:43 /,{"body":"0x%5B%5D=androxgh0stxx","content_type":"application/x-www-form-urlencoded","header":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"],"Accept-Encoding":["gzip, deflate"],"Accept-Language":["en-US,en;q=0.5"],"Connection":["keep-alive"],"Content-Length":["22"],"Content-Type":["application/x-www-form-urlencoded"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"]},"host":"106.75.75.181","method":"POST","proto":"HTTP/1.1","remote_addr":"5.189.157.228:64683","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"}
show less
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/5.189.157.228
2026-03- ...
show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/5.189.157.228
2026-03-09 05:11:16 /.env
2026-03-09 05:11:17 /,{"body":"0x%5B%5D=androxgh0stxx","content_type":"application/x-www-form-urlencoded","header":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"],"Accept-Encoding":["gzip, deflate"],"Accept-Language":["en-US,en;q=0.5"],"Connection":["keep-alive"],"Content-Length":["22"],"Content-Type":["application/x-www-form-urlencoded"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"]},"host":"101.200.164.172","method":"POST","proto":"HTTP/1.1","remote_addr":"5.189.157.228:63397","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"}
show less
Connection to port 80 with data transfer.
Data preview: GET /.env HTTP/1.1
Host: 107.175.212.44
Us ...
show moreConnection to port 80 with data transfer.
Data preview: GET /.env HTTP/1.1
Host: 107.175.212.44
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl
show less
Connection to port 80 with data transfer.
Data preview: GET /.env HTTP/1.1
Host: 104.250.239.52
Us ...
show moreConnection to port 80 with data transfer.
Data preview: GET /.env HTTP/1.1
Host: 104.250.239.52
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl
show less