JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.116.78.90

89.116.78.90 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 4%: ?

ISP	UAB Bite Lietuva
Usage Type	Fixed Line ISP
ASN	AS210906
Domain Name	bi.lt
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.116.78.90

Whois 89.116.78.90

IP Abuse Reports for 89.116.78.90:

This IP address has been reported a total of 17 times from 7 distinct sources. 89.116.78.90 was first reported on September 10th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-01 02:11:50 (6 days ago)	(mod_security) mod_security (id:220150) triggered by 89.116.78.90 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:220150) triggered by 89.116.78.90 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:08:23.491148 2026] [security2:error] [pid 7571:tid 7598] [client 89.116.78.90:57071] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\.{0,399}\\\\*\\\\/)?select)" at ARGS:s. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)\|\|ftp.kettlehill.com\|F\|2"] [data "9999')unionselect111,222,(select(concat(0x44617461626173653a20,database()))),4444,5---"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ftp.kettlehill.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ahzplwB9GwiQ72im4TcsMgAAAEM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 12:08:58 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 89.116.78.90 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 89.116.78.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 07:08:50.960826 2025] [security2:error] [pid 1763:tid 1763] [client 89.116.78.90:58657] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.nbcnewsradio.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/logs/errors.log"] [unique_id "aRXKUtep6dxw4sPFSaI8hgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-10 13:03:48 (7 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 01:38:31 (10 months ago)	(mod_security) mod_security (id:212620) triggered by 89.116.78.90 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:212620) triggered by 89.116.78.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 21:38:26.318958 2025] [security2:error] [pid 729657:tid 729699] [client 89.116.78.90:49001] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at ARGS_NAMES:bhl4n%22%3e%3cScRiPt%3ealert%28'document_domain'%29%3c%2fScRiPt%3eiyehb. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|www.kettlehill.net\|F\|2"] [data "Matched Data: <script found within ARGS_NAMES:bhl4n%22%3e%3cScRiPt%3ealert%28'document_domain'%29%3c%2fScRiPt%3eiyehb: bhl4n\\x22><script>alert('document_domain')</script>iyehb"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.kettlehill.net"] [uri "/furniture/catalog/all-products"] [unique_id "aIWDEhUVDjlJfvQpjEJSAgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-24 01:49:04 (11 months ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-05-29 15:34:09 (1 year ago)	(mod_security) mod_security (id:211190) triggered by 89.116.78.90 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:211190) triggered by 89.116.78.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 11:33:42.276411 2025] [security2:error] [pid 2889241:tid 2889241] [client 89.116.78.90:49933] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|autodiscover.farmers123.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?option=com_jashowcase&view=jashowcase&controller=../../../../../../../etc/passwd%00"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmers123.com"] [uri "/index.php"] [unique_id "aDh-VkZfLMHOia50psuteAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-28 13:20:03 (1 year ago)	\| A web attack returned code 200 (success).	Hacking SQL Injection Web App Attack
🇺🇸 nowyouknow	2024-10-06 19:47:37 (1 year ago)	(From [email protected]) Hi, Searching to enhance your site or company while avoiding ... show more (From [email protected]) Hi, Searching to enhance your site or company while avoiding straining your budget? Fiverr provides a wide range of services—everything from graphic design to website creation, starting as low as $5! If you are looking for a brand identity, site improvement, advertising assistance, or something else, Fiverr links you with talented freelancers ready to complete the task done quickly and within your budget. Explore it here: https://bit.ly/fiverr-professional-services Thank you, If you want to unsubcribe from these attractive newsletters, please fill the form at https://bit.ly/unsubscribenews show less	Phishing Web Spam
🇺🇸 oncord	2024-10-02 14:44:15 (1 year ago)	Form spam	Web Spam
Anonymous	2024-09-30 06:33:34 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 nowyouknow	2024-09-27 13:12:36 (1 year ago)	(From [email protected]) Hi, My name is Jonathan, and I am impressed by your business and th ... show more (From [email protected]) Hi, My name is Jonathan, and I am impressed by your business and the great things you’re doing. I wanted to contact you with an exciting opportunity: a complimentary article on Benzinga! With over 14 million monthly readers, it’s an excellent opportunity to enhance your brand’s credibility. And for only $79, we will be publishing affiliates of FOX, CBS, and ABC along with 300 more outlets. We could also get your article published on outlets like Business Insider, Yahoo Finance, and Market Watch—imagine the visibility! If you’re ready in getting your complimentary Benzinga article, just reply with "YES, I would like to get published in Benzinga"! I’d love to help you earn the visibility you deserve. {{Best\|Regards\|Best regards\|Kind regards\|Warm regards\|Cheers\|Thanks}, Jonathan PR Boost If you don't want to get an email from me on this matter again, please reply back with the text: "No, thank you" show less	Phishing Web Spam
🇸🇬 oncord	2024-09-26 12:17:33 (1 year ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2024-09-25 10:35:24 (1 year ago)	(From [email protected]) Hey, Are you finding it hard to make time to create ... show more (From [email protected]) Hey, Are you finding it hard to make time to create articles? Get help from a skilled SEO writer! I handle the research and deliver high-quality search engine optimized content to improve your search rankings and enhance your visitor interaction. If you need fresh articles for your blog or for your marketing efforts, take a look at our latest content offers here: https://bit.ly/writingbyben Benjamin Contact me directly at [email protected] or on Skype: behinger19 with any questions. If you don't want to get an email from me on this matter again, please reply back with the text: "No, thank you" show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-09-22 16:43:24 (1 year ago)	(From [email protected]) Hey, Do you struggle to make time to write articles? ... show more (From [email protected]) Hey, Do you struggle to make time to write articles? Get help from a skilled SEO writer! All the research is done for you and deliver well-written SEO content to help boost your rankings and enhance your visitor interaction. Looking for fresh content for your website or content marketing strategies, check out our current content specials here: https://bit.ly/writingbyben Benjamin Contact me directly at [email protected] or on Skype: behinger19 with any questions. If you don't want to get an email from me on this matter again, please reply back with the text: "No, thank you" show less	Phishing Web Spam
🇦🇺 MAGIC	2024-09-22 05:08:02 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 157.245.86.174

🇺🇸 147.185.132.74

🇮🇳 117.248.123.29

🇸🇬 68.183.178.130

🇨🇳 60.191.221.172

🇧🇾 45.128.205.130

🇩🇪 2a02:4780:3f:2161:0:1b79:6609:1

🇫🇷 173.212.215.176

🇺🇸 162.216.149.205

🇻🇳 116.99.174.61

🇨🇳 115.190.192.114

🇺🇸 69.73.187.130

🇺🇸 66.132.172.195

🇺🇸 54.241.125.66

🇺🇸 50.16.181.128

🇩🇪 36.255.97.87

🇺🇸 24.241.220.135

🇺🇸 2001:470:1:fb5::12b

🇸🇬 188.166.224.32

🇩🇪 185.242.3.149