JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.117.22.117

89.117.22.117 was found in our database!

This IP was reported 224 times. Confidence of Abuse is 0%: ?

ISP	SC Lithuanian Radio and TV Center
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40021
Hostname(s)	vmi3093031.contaboserver.net
Domain Name	telecentras.lt
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.117.22.117

Whois 89.117.22.117

IP Abuse Reports for 89.117.22.117:

This IP address has been reported a total of 224 times from 130 distinct sources. 89.117.22.117 was first reported on February 20th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vasile	2026-05-08 01:57:13 (1 month ago)	Shield Guard: Scanner: libredtail-http (+70) \| Chemin suspect: /hello.world \| RFI/LFI dans 'URI'	Web App Attack SQL Injection
🇪🇸 Gem	2026-02-27 23:05:42 (3 months ago)	Unauthorized web scan.	Web App Attack
Anonymous	2026-02-23 17:45:00 (3 months ago)	Unwanted Scanning	Brute-Force Bad Web Bot
🇫🇮 tjs	2026-02-22 22:45:00 (3 months ago)	web attack, shell attempt	Hacking Web App Attack
🇹🇷 rtbh.com.tr	2026-02-22 20:11:42 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 JCB	2026-02-22 09:27:00 (3 months ago)	89.117.22.117 - - [21/Feb/2026:19:47:41 +0200] "POST /cgi-bin/../../../../../../../../../../bin/sh H ... show more 89.117.22.117 - - [21/Feb/2026:19:47:41 +0200] "POST /cgi-bin/../../../../../../../../../../bin/sh HTTP/1.1" 400 266 "-" "libredtail-http" show less	Web App Attack Hacking
🇬🇧 openstrike.co.uk	2026-02-22 06:13:43 (3 months ago)	1 attack on shell probes: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTT ... show more 1 attack on shell probes: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 show less	Hacking
🇦🇹 urnilxfgbez	2026-02-21 23:45:00 (3 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 geot	2026-02-21 23:11:33 (3 months ago)	POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32 ... show more POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1 show less	Port Scan Hacking Web App Attack
🇬🇧 Joe-Mark	2026-02-21 22:43:45 (3 months ago)	Found CINS badguys / proto=6 . srcport=54302 . dstport=2375 . packet filter (2334)	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-02-21 22:01:59 (3 months ago)	FortiGate detected IPS attack from IPv4 address 89.117.22.117	Hacking
🇩🇪 phil2k	2026-02-21 19:59:21 (3 months ago)	Firewall: Within 2026-02-21 07:50:34 - 2026-02-21 15:15:49 CET(+0100) identified: unallowed access f ... show more Firewall: Within 2026-02-21 07:50:34 - 2026-02-21 15:15:49 CET(+0100) identified: unallowed access from 89.117.22.117 on port 23(telnet) (1 trial) Fail2ban: Within 2026-02-21 07:50:34 - 2026-02-21 15:15:50 CET(+0100) banned: 11 times by fail2ban[firewall]; 11 times by fail2ban[recidive] show less	Port Scan Brute-Force
🇹🇷 Threat.live	2026-02-21 18:45:34 (3 months ago)	Suspicious activity, tcp/2222	Port Scan
🇩🇪 ManagedStack	2026-02-21 18:45:02 (3 months ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇩🇪 igerman	2026-02-21 18:44:58 (3 months ago)	caddy probes: [web] POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh -> 403 [w ... show more caddy probes: [web] POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh -> 403 [web] POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input -> 403 [web] POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input -> 403 [web] GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -> 403 [web] GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php -> 403 [web] GET /vendor/phpunit/src/Util/PHP/eval-stdin.php -> 403 [web] GET /vendor/phpunit/Util/PHP/eval-stdin.php -> 403 [web] GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php -> 403 [web] GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php -> 403 [web] GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php -> 403 [web] GET /phpunit/phpunit/Util/PHP/eval-stdin.php -> 403 [web] GET /phpunit/src/Util/PHP/eval-stdin.php -> 403 [web] GET /phpunit/Util/PHP/eval-stdin.php -> 403 show less	Web App Attack

Showing 1 to 15 of 224 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.224.194.3

🇩🇪 217.154.1.156

🇹🇼 198.235.24.92

🇮🇩 143.20.49.38

🇻🇳 117.2.62.40

🇺🇸 100.29.192.97

🇵🇱 95.214.53.196

🇰🇿 92.47.46.174

🇱🇹 62.60.130.251

🇸🇬 47.84.105.209

🇪🇸 46.6.124.216

🇺🇸 2602:fb54:1400::29

🇺🇸 216.250.115.227

🇰🇷 211.223.107.86

🇧🇩 210.4.68.72

🇹🇭 202.44.227.69

🇹🇼 198.235.24.89

🇹🇼 198.235.24.88

🇦🇷 190.244.39.224

🇧🇷 189.91.7.180