JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.117.54.214

89.117.54.214 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 100%: ?

100%

ISP	IPXO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3309389.contaboserver.net
Domain Name	telecentras.lt
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.117.54.214

Whois 89.117.54.214

IP Abuse Reports for 89.117.54.214:

This IP address has been reported a total of 83 times from 68 distinct sources. 89.117.54.214 was first reported on June 5th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 service Informatique	2026-06-07 04:00:37 (2 weeks ago)	/cgi-bin	Web App Attack
🇺🇸 antlac1	2026-06-07 00:18:28 (2 weeks ago)	crowdsecurity/http-cve-2021-42013	Brute-Force Web App Attack
🇺🇸 bigscoots.com	2026-06-06 23:37:32 (2 weeks ago)	(sshd) Failed SSH login from 89.117.54.214 (US/United States/vmi3309389.contaboserver.net): 5 in the ... show more (sshd) Failed SSH login from 89.117.54.214 (US/United States/vmi3309389.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 6 18:36:19 17409 sshd[7781]: Invalid user admin from 89.117.54.214 port 47232 Jun 6 18:36:21 17409 sshd[7781]: Failed password for invalid user admin from 89.117.54.214 port 47232 ssh2 Jun 6 18:36:52 17409 sshd[7895]: Invalid user orangepi from 89.117.54.214 port 44104 Jun 6 18:36:55 17409 sshd[7895]: Failed password for invalid user orangepi from 89.117.54.214 port 44104 ssh2 Jun 6 18:37:26 17409 sshd[8221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.117.54.214 user=root show less	Brute-Force SSH
🇺🇸 paulo.apoloni	2026-06-06 23:26:13 (2 weeks ago)	89.117.54.214 - - [06/Jun/2026:20:26:11 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin. ... show more 89.117.54.214 - - [06/Jun/2026:20:26:11 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "libredtail-http" 89.117.54.214 - - [06/Jun/2026:20:26:11 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "libredtail-http" 89.117.54.214 - - [06/Jun/2026:20:26:12 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "libredtail-http" 89.117.54.214 - - [06/Jun/2026:20:26:12 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "libredtail-http" 89.117.54.214 - - [06/Jun/2026:20:26:12 -0300] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 146 "-" "libredtail-http" ... show less	Web App Attack
🇦🇹 urnilxfgbez	2026-06-06 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 ezscale	2026-06-06 22:27:12 (2 weeks ago)	SSH brute force on node01.fsn1.ezscale.tech (3 failures). Detected by fail2ban.	Brute-Force SSH
🇨🇳 pengpeng	2026-06-06 22:19:06 (2 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 23 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan IoT Targeted
🇺🇸 Som1ght3n	2026-06-06 22:01:37 (2 weeks ago)	IP 89.117.54.214 attempted to exploit CVE-2017-9841 (PHPUnit RCE) by accessing `/vendor/phpunit/phpu ... show more IP 89.117.54.214 attempted to exploit CVE-2017-9841 (PHPUnit RCE) by accessing `/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`. show less	Web App Attack
Anonymous	2026-06-06 21:58:34 (2 weeks ago)	Fail2ban Nginx log integration.	Brute-Force SSH Port Scan
🇩🇪 HoneyPot-FrPri	2026-06-06 21:56:54 (2 weeks ago)	89.117.54.214 - - [06/Jun/2026:23:56:54 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 89.117.54.214 - - [06/Jun/2026:23:56:54 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 157 "-" "-" ... show less	Bad Web Bot Web App Attack
🇺🇸 bigscoots.com	2026-06-06 21:50:42 (2 weeks ago)	(sshd) Failed SSH login from 89.117.54.214 (US/United States/vmi3309389.contaboserver.net): 5 in the ... show more (sshd) Failed SSH login from 89.117.54.214 (US/United States/vmi3309389.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 6 16:49:14 13087 sshd[21981]: Invalid user admin from 89.117.54.214 port 56492 Jun 6 16:49:16 13087 sshd[21981]: Failed password for invalid user admin from 89.117.54.214 port 56492 ssh2 Jun 6 16:49:48 13087 sshd[21998]: Invalid user orangepi from 89.117.54.214 port 58608 Jun 6 16:49:50 13087 sshd[21998]: Failed password for invalid user orangepi from 89.117.54.214 port 58608 ssh2 Jun 6 16:50:22 13087 sshd[22106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.117.54.214 user=root show less	Brute-Force SSH
🇫🇷 Kraften	2026-06-06 21:46:52 (2 weeks ago)	Trying script web attack ...	Web App Attack
🇺🇸 xmission.com	2026-06-06 21:22:16 (2 weeks ago)	Blocked by UFW (TCP on 2222) Source port: 40485 TTL: 50 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2222) Source port: 40485 TTL: 50 Packet length: 40 TOS: 0x00 This report (for 89.117.54.214) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 iNetWorker	2026-06-06 20:30:24 (2 weeks ago)	firewall-block, port(s): 2375/tcp	Port Scan
Anonymous	2026-06-06 20:18:29 (2 weeks ago)	Honeypot hit: Brute-force attack detected on 23/TELNET • Credential used: admin:admin • Number of lo ... show more Honeypot hit: Brute-force attack detected on 23/TELNET • Credential used: admin:admin • Number of login attempts: 1 Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 113.30.177.170

🇸🇬 104.23.175.134

🇳🇱 81.19.216.109

🇺🇸 57.141.0.254

🇳🇱 45.148.10.152

🇺🇸 13.90.206.6

🇺🇸 91.230.168.6

🇳🇱 45.156.87.31

🇳🇱 45.95.147.229

🇸🇬 43.160.251.13

🇩🇪 194.88.98.121

🇪🇨 149.50.200.26

🇺🇸 66.249.69.10

🇺🇸 64.62.156.193

🇸🇬 43.156.162.193

🇨🇳 36.132.34.69

🇩🇪 2a05:d014:fb0:c800:339e:8fcb:59e2:4bb7

🇨🇦 2001:1810:4201:175:0:4:4531:7044

🇺🇸 166.77.36.7

🇸🇬 101.47.15.119