JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.117.157.239

89.117.157.239 was found in our database!

This IP was reported 176 times. Confidence of Abuse is 0%: ?

ISP	IPXO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47583
Domain Name	telecentras.lt
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.117.157.239

Whois 89.117.157.239

IP Abuse Reports for 89.117.157.239:

This IP address has been reported a total of 176 times from 90 distinct sources. 89.117.157.239 was first reported on February 26th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-08 07:20:25 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 e.fierstra	2026-06-08 07:14:38 (3 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-06-08 06:08:29 (3 months ago)	Web attack	Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-06-08 05:47:34 (3 months ago)	Multiple WAF Violations	Web App Attack
🇲🇾 Rizzy	2026-06-08 02:54:54 (3 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 informedclearly.com	2026-06-08 02:06:32 (3 months ago)	WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.env? ua=Mozilla/5.0 (Macintosh; Intel Mac OS X ... show more WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.env? ua=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.3 show less	Hacking
Anonymous	2026-06-08 00:18:40 (3 months ago)	(caddyscan) Scanner path probe from 89.117.157.239 (IN/India/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 89.117.157.239 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 89.117.157.239 - - [08/Jun/2026:00:18:39 +0000] "GET /core/.env HTTP/1.1" [REDACTED] 200 2627 89.117.157.239 - - [08/Jun/2026:00:18:39 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 89.117.157.239 - - [08/Jun/2026:00:18:39 +0000] "GET /admin/.env HTTP/1.1" [REDACTED] 200 2627 89.117.157.239 - - [08/Jun/2026:00:18:39 +0000] "GET /member/.env HTTP/1.1" [REDACTED] 200 2627 89.117.157.239 - - [08/Jun/2026:00:18:39 +0000] "GET /dev/.env HTTP/1.1" show less	Port Scan
🇩🇪 big-cloud.nl	2026-06-07 21:07:42 (3 months ago)	Try to access /admin/.env	Web App Attack
🇩🇪 NewGastroline	2026-06-07 17:41:21 (3 months ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇮🇹 abuseiphack	2026-06-07 14:32:50 (3 months ago)	Automatic report for brute force attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 12:53:28 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 89.117.157.239 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 89.117.157.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 08:53:24.083415 2026] [security2:error] [pid 26851:tid 26851] [client 89.117.157.239:20586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chatgptfrance.net"] [uri "/backend/.env"] [unique_id "aiVpxGNi-xdIBCkDILfF0wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2026-06-07 12:37:59 (3 months ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
🇩🇪 itsolon	2026-06-07 08:42:44 (3 months ago)	[07/Jun/2026:10:42:41 +0200] 178082176186.733849 89.117.157.239 36136 217.154.7.177 443 [07/Jun/2026 ... show more [07/Jun/2026:10:42:41 +0200] 178082176186.733849 89.117.157.239 36136 217.154.7.177 443 [07/Jun/2026:10:42:41 +0200] 178082176112.815975 89.117.157.239 36106 217.154.7.177 443 [07/Jun/2026:10:42:41 +0200] 178082176192.791832 89.117.157.239 36156 217.154.7.177 443 [07/Jun/2026:10:42:41 +0200] 178082176148.773991 89.117.157.239 36118 217.154.7.177 443 [07/Jun/2026:10:42:41 +0200] 178082176194.638935 89.117.157.239 36180 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 07:46:50 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 89.117.157.239 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 89.117.157.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 03:46:45.151804 2026] [security2:error] [pid 537:tid 537] [client 89.117.157.239:19092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harwoodmechanical.com"] [uri "/member/.env"] [unique_id "aiUh5dSyXy-sPX7dcFk_NwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 gadix	2026-06-07 06:55:01 (3 months ago)	[07/Jun/2026:08:55:00.177638 +0200] aiUVxDzTIEZojuY1RCctDAAAAFI 89.117.157.239 51082 127.0.0.1 7081 ... show more [07/Jun/2026:08:55:00.177638 +0200] aiUVxDzTIEZojuY1RCctDAAAAFI 89.117.157.239 51082 127.0.0.1 7081 [07/Jun/2026:08:55:00.180991 +0200] aiUVxDzTIEZojuY1RCctDQAAAEo 89.117.157.239 51084 127.0.0.1 7081 [07/Jun/2026:08:55:00.184637 +0200] aiUVxDzTIEZojuY1RCctDgAAAFE 89.117.157.239 51094 127.0.0.1 7081 ... show less	Web App Attack

Showing 1 to 15 of 176 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.34.56.27

🇭🇰 188.255.140.178

🇺🇸 167.172.135.26

🇺🇸 159.223.176.166

🇺🇦 146.158.30.42

🇧🇪 34.140.234.80

🇺🇸 34.105.27.255

🇺🇸 17.166.235.229

🇩🇪 185.143.238.62

🇧🇬 109.160.32.70

🇵🇰 103.82.255.141

🇸🇬 103.20.122.54

🇮🇷 94.182.168.149

🇵🇹 85.244.79.143

🇫🇷 51.38.189.62

🇿🇦 4.221.162.168

🇧🇪 198.235.24.237

🇺🇸 172.208.8.54

🇯🇵 150.230.106.64

🇺🇸 104.152.52.145