This IP address has been reported a total of
32
times from
28 distinct
sources.
89.144.46.50 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Back ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Backup file probing, Cloud secrets probing
show less
(mod_security) mod_security triggered on hostname [redacted] 89.144.46.50 (DE/Germany/crimson-turkey ...
show more(mod_security) mod_security triggered on hostname [redacted] 89.144.46.50 (DE/Germany/crimson-turkey-55731.zap.cloud)
show less
SQL Injection
Anonymous
Bot / scanning and/or hacking attempts: GET /database.sql HTTP/1.1, GET /graphiql HTTP/1.1, GET /v1/ ...
show moreBot / scanning and/or hacking attempts: GET /database.sql HTTP/1.1, GET /graphiql HTTP/1.1, GET /v1/graphql HTTP/1.1, GET /v3/api-docs HTTP/1.1, GET /vendor/.env HTTP/1.1, GET /.env.development.local HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.json HTTP/1.1, GET /.env.template HTTP/1.1, GET /.env.example HTTP/1.1, GET /crm/.env HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.ssh/id_rsa HTTP/1.1, GET /Jenkinsfile HTTP/1.1, GET /v2/.env HTTP/1.1, GET /.gitlab-ci.yml HTTP/1.1, GET /swagger-ui.html HTTP/1.1, GET /openapi.json HTTP/1.1
show less
(mod_security) mod_security triggered on hostname [redacted] 89.144.46.50 (DE/Germany/crimson-turkey ...
show more(mod_security) mod_security triggered on hostname [redacted] 89.144.46.50 (DE/Germany/crimson-turkey-55731.zap.cloud)
show less
(mod_security) mod_security (id:210492) triggered by 89.144.46.50 (crimson-turkey-55731.zap.cloud): ...
show more(mod_security) mod_security (id:210492) triggered by 89.144.46.50 (crimson-turkey-55731.zap.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:55:03.899056 2026] [security2:error] [pid 16608:tid 16608] [client 89.144.46.50:54161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aes-nihil.com"] [uri "/.env"] [unique_id "as_QB3QbkHt7OQq9-_44pwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 89.144.46.50 (DE/Germany/crimson-turkey ...
show more(mod_security) mod_security triggered on hostname [redacted] 89.144.46.50 (DE/Germany/crimson-turkey-55731.zap.cloud)
show less