JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.117.45.102

89.117.45.102 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	Turkcell Iletisim Hizmetleri A.S
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209854
Domain Name	turkcell.com.tr
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.117.45.102

Whois 89.117.45.102

IP Abuse Reports for 89.117.45.102:

This IP address has been reported a total of 29 times from 28 distinct sources. 89.117.45.102 was first reported on June 26th 2026, and the most recent report was 22 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 R.G.	2026-08-02 03:46:26 (22 minutes ago)	(WPLOGINorWHATEVER) Get lost please 89.117.45.102 (US/United States/-): 7 in the last 600 secs; Port ... show more (WPLOGINorWHATEVER) Get lost please 89.117.45.102 (US/United States/-): 7 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 cwytech	2026-08-02 03:15:55 (53 minutes ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.	Bad Web Bot Web App Attack
Anonymous	2026-08-02 03:12:38 (56 minutes ago)	Attack detected: 89.117.45.102 [2026-08-02] Categories: 18 --- wp-login brute force (66 hits) --- 89 ... show more Attack detected: 89.117.45.102 [2026-08-02] Categories: 18 --- wp-login brute force (66 hits) --- 89.117.45.102 - - [02/Aug/2026:01:03:38 +0000] "POST /wp-login.php HTTP/1.1" 200 4958 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.117.45.102 - - [02/Aug/2026:01:03:42 +0000] "POST /wp-login.php HTTP/1.1" 200 4958 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.117.45.102 - - [02/Aug/2026:01:03:45 +0000] "POST /wp-login.php HTTP/1.1" 200 4957 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.117.45.102 - - [02/Aug/2026:01:03:48 +0000] "POST /wp-login.php HTTP/1.1" 200 4957 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.117.45.102 - - [02/Aug/2026:01:03:52 +0000] "POST /wp-login.php HTTP/1.1" 200 4957 "-" "Mozilla/5.0 (Window show less	Brute-Force
🇺🇸 kbeezie	2026-08-02 01:36:50 (2 hours ago)	89.117.45.102 - - [01/Aug/2026:21:36:45 -0400] "GET /wp-admin/index.php HTTP/1.1" 429 162 "-" "pytho ... show more 89.117.45.102 - - [01/Aug/2026:21:36:45 -0400] "GET /wp-admin/index.php HTTP/1.1" 429 162 "-" "python-requests/2.33.1" 89.117.45.102 - - [01/Aug/2026:21:36:45 -0400] "GET /wp-admin/index.php HTTP/1.1" 429 162 "-" "python-requests/2.33.1" 89.117.45.102 - - [01/Aug/2026:21:36:47 -0400] "GET /wp-admin/index.php HTTP/1.1" 429 162 "-" "python-requests/2.33.1" 89.117.45.102 - - [01/Aug/2026:21:36:48 -0400] "GET /wp-admin/index.php HTTP/1.1" 429 162 "-" "python-requests/2.33.1" 89.117.45.102 - - [01/Aug/2026:21:36:49 -0400] "GET /wp-admin/index.php HTTP/1.1" 429 162 "-" "python-requests/2.33.1" show less	Bad Web Bot Web App Attack
🇺🇸 conrad10781	2026-08-02 01:25:31 (2 hours ago)	nginx-wordpress	Web App Attack
🇩🇪 grassau.com	2026-08-02 01:09:27 (2 hours ago)	(php-url-fopen) Failed php-url-fopen trigger from 89.117.45.102 (US/United States/California/San Fra ... show more (php-url-fopen) Failed php-url-fopen trigger from 89.117.45.102 (US/United States/California/San Francisco/-) show less	Web App Attack
🇬🇧 andypiper	2026-08-02 01:01:31 (3 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 WeekendWeb	2026-08-02 00:14:42 (3 hours ago)	Wordpress Vunerability attack	Web App Attack
Anonymous	2026-08-01 23:52:34 (4 hours ago)	Failed Wordpress Logins	Web App Attack
🇨🇭 4server	2026-08-01 23:51:05 (4 hours ago)	[SunAug0201:51:01.6747662026][security2:error][pid1431168:tid1431373][client89.117.45.102:0]ModSecur ... show more [SunAug0201:51:01.6747662026][security2:error][pid1431168:tid1431373][client89.117.45.102:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"203\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITICAL\"][hostname\"larademarco.ch\"][uri\"/wp-login.php\"][unique_id\"am6GZRuWW3f0Sdm4wEn6lQAAAEI\"] show less	Hacking Web App Attack
🇪🇸 alferez	2026-08-01 23:43:27 (4 hours ago)	Multiple WP Login Attack	Hacking Exploited Host Web App Attack
🇬🇧 gigatech	2026-08-01 23:20:03 (4 hours ago)	Webserver Probing	Web App Attack
🇫🇮 YF	2026-08-01 23:00:26 (5 hours ago)	wp-login.php Brute force	Brute-Force Web App Attack
🇨🇭 zynex	2026-08-01 22:07:13 (6 hours ago)	URL Probing: /wp-login.php	Web App Attack
🇳🇱 Site.eu	2026-08-01 21:56:23 (6 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.245

🇳🇱 193.47.62.167

🇺🇸 167.99.237.244

🇫🇮 147.185.133.230

🇳🇱 89.21.67.144

🇺🇸 64.23.235.190

🇺🇸 52.22.87.224

🇺🇸 40.124.179.252

🇨🇳 36.22.214.197

🇺🇸 23.251.34.84

🇨🇦 206.176.146.236

🇳🇱 185.223.235.8

🇸🇬 140.245.57.99

🇺🇸 104.168.117.151

🇮🇩 103.99.214.211

🇳🇱 91.92.42.147

🇷🇺 37.77.150.70

🇺🇸 34.125.198.192

🇰🇷 14.42.47.150

🇧🇷 205.210.31.130