JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.114.94.207

89.114.94.207 was found in our database!

This IP was reported 240 times. Confidence of Abuse is 0%: ?

ISP	Vodafone Portugal - Communicacoes Pessoais S.A.
Usage Type	Fixed Line ISP
ASN	AS12353
Hostname(s)	207.94.114.89.rev.vodafone.pt
Domain Name	vodafone.com
Country	🇵🇹 Portugal
City	Lisbon, Lisbon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.114.94.207

Whois 89.114.94.207

IP Abuse Reports for 89.114.94.207:

This IP address has been reported a total of 240 times from 85 distinct sources. 89.114.94.207 was first reported on March 17th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-07-01 10:54:46 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇨🇳 ThreatBook.io	2023-09-15 00:10:13 (2 years ago)	ThreatBook Intelligence: VPN,Scanner more details on https://threatbook.io/ip/89.114.94.207 2023-09- ... show more ThreatBook Intelligence: VPN,Scanner more details on https://threatbook.io/ip/89.114.94.207 2023-09-14 20:34:09 /backend/.env 2023-09-14 20:34:10 /backend,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["/"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"]},"host":"38.147.170.200","method":"POST","proto":"HTTP/1.1","remote_addr":"89.114.94.207:47940","status_code":200,"url":"/backend","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"} show less	Web App Attack
🇫🇷 LRNP	2023-09-14 11:28:52 (2 years ago)	_:80 89.114.94.207 - - [14/Sep/2023:11:28:51 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X ... show more _:80 89.114.94.207 - - [14/Sep/2023:11:28:51 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇦🇺 Ross Wheatley	2023-09-14 10:30:51 (2 years ago)	POST /admin HTTP/1.1 404 492 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko ... show more POST /admin HTTP/1.1 404 492 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 show less	Brute-Force Web App Attack
🇺🇸 physke	2023-09-13 02:15:22 (2 years ago)	REQUESTED PAGE: /laravel/.env	Web App Attack
🇩🇪 niceshops.com	2023-09-13 00:02:43 (2 years ago)	Web Attack ([13/Sep/2023:01:41:35.826] GET /laravel/.env)	Web App Attack
🇩🇪 xyz.rip	2023-09-12 00:14:54 (2 years ago)	WAF Violation...	Hacking Web App Attack
🇺🇸 lnklnx	2023-09-11 17:06:45 (2 years ago)	www.lnklnx.com:80 89.114.94.207 - - [11/Sep/2023:12:06:44 -0500] "GET /.env HTTP/1.1" 301 484 "-" "M ... show more www.lnklnx.com:80 89.114.94.207 - - [11/Sep/2023:12:06:44 -0500] "GET /.env HTTP/1.1" 301 484 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
🇨🇳 ThreatBook.io	2023-09-11 05:40:28 (2 years ago)	ThreatBook Intelligence: VPN,Scanner more details on https://threatbook.io/ip/89.114.94.207 2023-09- ... show more ThreatBook Intelligence: VPN,Scanner more details on https://threatbook.io/ip/89.114.94.207 2023-09-10 05:37:09 /app/.env 2023-09-10 05:37:11 /app,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["/"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"]},"host":"82.157.162.134","method":"POST","proto":"HTTP/1.1","remote_addr":"89.114.94.207:34022","status_code":200,"url":"/app","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"} show less	Web App Attack
🇨🇳 ThreatBook.io	2023-09-09 06:21:25 (2 years ago)	ThreatBook Intelligence: VPN,Scanner more details on https://threatbook.io/ip/89.114.94.207 2023-09- ... show more ThreatBook Intelligence: VPN,Scanner more details on https://threatbook.io/ip/89.114.94.207 2023-09-08 08:00:16 /api/.env 2023-09-08 08:00:16 /api,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["/"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"]},"host":"139.224.137.6","method":"POST","proto":"HTTP/1.1","remote_addr":"89.114.94.207:36936","status_code":200,"url":"/api","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"} show less	Web App Attack
🇩🇪 niceshops.com	2023-09-08 00:01:02 (2 years ago)	Web Attack ([08/Sep/2023:01:01:15.578] GET /api/.env)	Web App Attack
🇩🇪 ps-center	2023-09-06 01:18:39 (2 years ago)	MYH: Web Attack GET /admin/.env	Web Spam Hacking Bad Web Bot Web App Attack
🇩🇪 niceshops.com	2023-09-06 00:01:47 (2 years ago)	Web Attack ([06/Sep/2023:00:13:05.528] GET /laravel/.env)	Web App Attack
🇩🇪 ut-addicted.com	2023-09-05 10:12:44 (2 years ago)	\[Tue Sep 05 12:12:42.792259 2023\] \[:error\] \[pid 12625:tid 140263531935488\] \[client 89.114.94. ... show more \[Tue Sep 05 12:12:42.792259 2023\] \[:error\] \[pid 12625:tid 140263531935488\] \[client 89.114.94.207:53714\] \[client 89.114.94.207\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/laravel/.env"\] \[unique_id "ZPb-Gn2XdRYm@FC3DaJDrwAAANI"\] show less	Brute-Force Web App Attack
🇩🇪 ut-addicted.com	2023-09-04 21:23:10 (2 years ago)	\[Mon Sep 04 23:23:08.850789 2023\] \[:error\] \[pid 15067:tid 139901213329152\] \[client 89.114.94. ... show more \[Mon Sep 04 23:23:08.850789 2023\] \[:error\] \[pid 15067:tid 139901213329152\] \[client 89.114.94.207:35766\] \[client 89.114.94.207\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "ZPZKvHRhF@ySxYS1IGc9zQAAAMQ"\] show less	Brute-Force Web App Attack

Showing 1 to 15 of 240 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 216.226.76.30

🇦🇷 181.225.10.34

🇺🇸 143.110.158.108

🇱🇹 141.98.9.104

🇮🇳 103.241.45.120

🇺🇸 66.132.195.71

🇺🇸 20.64.105.230

🇺🇸 2001:470:1:332::1a

🇦🇷 201.253.200.5

🇸🇾 185.225.41.192

🇺🇸 162.216.149.137

🇨🇳 120.225.58.156

🇨🇳 119.41.148.202

🇮🇩 103.194.173.97

🇲🇦 102.97.35.36

🇷🇺 95.104.184.209

🇳🇱 91.92.47.252

🇺🇸 66.132.195.60

🇺🇸 64.62.156.198

🇺🇸 35.196.70.102