JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.117.63.237

89.117.63.237 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 100%: ?

100%

ISP	IPXO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3014015.contaboserver.net
Domain Name	telecentras.lt
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.117.63.237

Whois 89.117.63.237

IP Abuse Reports for 89.117.63.237:

This IP address has been reported a total of 72 times from 52 distinct sources. 89.117.63.237 was first reported on June 4th 2026, and the most recent report was 23 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-06-13 14:02:16 (23 minutes ago)	2.552 requests from abuseipdb.com blacklisted IP (7mos2w4d)	Brute-Force Bad Web Bot
🇩🇪 Prodscape	2026-06-13 12:54:44 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 89.117.63.237 (US/United States/vmi3014015.cont ... show more (mod_security) mod_security (id:210492) triggered by 89.117.63.237 (US/United States/vmi3014015.contaboserver.net): 5 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC show less	Port Scan
🇺🇸 masterguru	2026-06-13 08:28:37 (5 hours ago)	. Matched phrase "/.env" at REQUEST_URI. (210492-128)	Web App Attack
Anonymous	2026-06-13 07:56:20 (6 hours ago)	[Sat Jun 13 09:56:19.758579 2026] [authz_core:error] [pid 14314] [client 89.117.63.237:59642] AH0163 ... show more [Sat Jun 13 09:56:19.758579 2026] [authz_core:error] [pid 14314] [client 89.117.63.237:59642] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Jun 13 09:56:19.758611 2026] [authz_core:error] [pid 14312] [client 89.117.63.237:59638] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Jun 13 09:56:19.759286 2026] [authz_core:error] [pid 14311] [client 89.117.63.237:59698] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇵🇱 TheWojtek	2026-06-13 06:40:30 (7 hours ago)	[Sat Jun 13 08:40:29.492246 2026] [access_compat:error] [pid 1805362:tid 1805388] [client 89.117.63. ... show more [Sat Jun 13 08:40:29.492246 2026] [access_compat:error] [pid 1805362:tid 1805388] [client 89.117.63.237:51874] AH01797: client denied by server configuration: /var/www/nextcloud/config/secrets.yml ... show less	Brute-Force Web App Attack
🇳🇱 ParaBug	2026-06-13 06:20:22 (8 hours ago)	89.117.63.237 - - [13/Jun/2026:08:20:22 +0200] "GET /.env HTTP/1.1" 403 384 "-" "Mozilla/5.0 (compat ... show more 89.117.63.237 - - [13/Jun/2026:08:20:22 +0200] "GET /.env HTTP/1.1" 403 384 "-" "Mozilla/5.0 (compatible)" ... show less	Phishing Brute-Force Web App Attack
🇦🇹 Starburst SysOp Team	2026-06-13 06:18:36 (8 hours ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-vie6-1)	Hacking Bad Web Bot
🇩🇪 kingjan1999	2026-06-13 05:14:02 (9 hours ago)	Blocked by UFW [7001/tcp] \| SPT: 46845 \| TTL: 249 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [7001/tcp] \| SPT: 46845 \| TTL: 249 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-06-13 05:07:54 (9 hours ago)	Connection atttempts against closed TCP ports Jun 13 07:04:08 BLOCK SRC=89.117.63.237 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 13 07:04:08 BLOCK SRC=89.117.63.237 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=28552 PROTO=TCP SPT=46845 DPT=8888 WINDOW=1024 RES=0x00 SYN Jun 13 07:06:04 BLOCK SRC=89.117.63.237 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=28275 PROTO=TCP SPT=46845 DPT=8983 WINDOW=1024 RES=0x00 SYN Jun 13 07:07:53 BLOCK SRC=89.117.63.237 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=56293 PROTO=TCP SPT=46845 DPT=7001 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇫🇷 guillaume illien	2026-06-13 04:03:07 (10 hours ago)	89.117.63.237 - - [13/Jun/2026:04:03:00 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compat ... show more 89.117.63.237 - - [13/Jun/2026:04:03:00 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible)" 89.117.63.237 - - [13/Jun/2026:04:03:00 +0000] "GET /.env.production HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible)" 89.117.63.237 - - [13/Jun/2026:04:03:00 +0000] "GET /.env.local HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible)" 89.117.63.237 - - [13/Jun/2026:04:03:01 +0000] "GET /.env.prod HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible)" 89.117.63.237 - - [13/Jun/2026:04:03:01 +0000] "GET /.env.backup HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible)" 89.117.63.237 - - [13/Jun/2026:04:03:05 +0000] "GET /.env.example HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible)" 89.117.63.237 - - [13/Jun/2026:04:03:06 +0000] "GET /.env.development HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible)" ... show less	Hacking Brute-Force Web App Attack SSH
Anonymous	2026-06-13 03:58:59 (10 hours ago)	89.117.63.237 - - [13/Jun/2026:05:58:36 +0200] "GET /wp-config.php HTTP/1.1" 403 146 "-" "Mozilla/5. ... show more 89.117.63.237 - - [13/Jun/2026:05:58:36 +0200] "GET /wp-config.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible)" "-" "212.83.143.188" 89.117.63.237 - - [13/Jun/2026:05:58:38 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible)" "-" "212.83.143.188" 89.117.63.237 - - [13/Jun/2026:05:58:41 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible)" "-" "212.83.143.188" 89.117.63.237 - - [13/Jun/2026:05:58:42 +0200] "GET /wp-config.php~ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible)" "-" "212.83.143.188" 89.117.63.237 - - [13/Jun/2026:05:58:56 +0200] "GET /app/etc/env.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible)" "-" "212.83.143.188" 89.117.63.237 - - [13/Jun/2026:05:58:58 +0200] "GET /sites/default/settings.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible)" "-" "212.83.143.188" show less	Brute-Force
🇳🇱 pearbright	2026-06-13 03:11:44 (11 hours ago)	[Sat Jun 13 03:11:41.805729 2026] [php:error] [pid 573837:tid 573837] [client 89.117.63.237:44002] s ... show more [Sat Jun 13 03:11:41.805729 2026] [php:error] [pid 573837:tid 573837] [client 89.117.63.237:44002] script '/var/www/html/wp-config.php' not found or unable to stat [Sat Jun 13 03:11:43.827191 2026] [php:error] [pid 573694:tid 573694] [client 89.117.63.237:40448] script '/var/www/html/wp-config.php' not found or unable to stat ... show less	Web App Attack
🇫🇷 zulzeen	2026-06-13 03:04:59 (11 hours ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Infra/DevOps Attack)	Hacking Web App Attack
🇮🇹 NonOggiCaroMio	2026-06-13 01:35:21 (12 hours ago)	Arruso ca si: crowdsecurity/http-sensitive-files	Brute-Force
🇳🇱 juutis	2026-06-12 22:24:58 (16 hours ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.144.90.40

🇰🇷 211.104.137.55

🇭🇰 168.76.131.178

🇭🇰 152.32.188.207

🇨🇱 136.248.242.166

🇨🇳 120.48.11.36

🇺🇸 74.125.181.157

🇳🇱 72.56.86.124

🇩🇪 64.89.163.138

🇭🇰 35.241.107.9

🇬🇧 35.203.211.54

🇩🇪 5.231.28.193

🇧🇷 186.200.6.38

🇨🇳 171.114.225.44

🇨🇳 119.96.193.72

🇸🇬 119.28.101.155

🇹🇼 116.59.10.205

🇫🇷 92.103.134.183

🇺🇸 18.190.15.50

🇬🇧 213.166.84.50