JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.169.48.41

89.169.48.41 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 3%: ?

ISP	Lovitel LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41275
Domain Name	lovit.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.169.48.41

Whois 89.169.48.41

IP Abuse Reports for 89.169.48.41:

This IP address has been reported a total of 30 times from 23 distinct sources. 89.169.48.41 was first reported on October 22nd 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 punctualsuspension968	2026-06-05 17:33:13 (3 days ago)	blocked by ufw on TCP 11834	Port Scan
🇬🇧 [email protected]	2025-11-06 01:06:25 (7 months ago)	...	Brute-Force SSH
🇩🇪 Vegascosmetics	2025-11-05 22:51:52 (7 months ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
Anonymous	2025-11-05 08:40:28 (7 months ago)		Web App Attack
🇫🇷 Thaliruth	2025-11-04 23:34:19 (7 months ago)	89.169.48.41 - - [05/Nov/2025:00:34:19 +0100] "GET /xleet.php HTTP/1.1" 404 262 "-" "Mozilla/5.0 (Wi ... show more 89.169.48.41 - - [05/Nov/2025:00:34:19 +0100] "GET /xleet.php HTTP/1.1" 404 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.93 Safari/537.36" 89.169.48.41 - - [05/Nov/2025:00:34:19 +0100] "GET /admin.php HTTP/1.1" 404 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.93 Safari/537.36" ... show less	Brute-Force Web App Attack
Anonymous	2025-11-04 10:23:37 (7 months ago)	Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ... show more Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 mnsf	2025-11-04 01:05:45 (7 months ago)	Too many Status 40X (14)	Brute-Force Web App Attack
🇳🇱 i-turnradio.nl	2025-11-03 12:58:40 (7 months ago)	2025-11-03 @ 13:58:39 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
🇩🇪 hbrks	2025-11-01 19:20:31 (7 months ago)	1 attack(s) detected, such as these: {"event":"nginx_block","ip":"89.169.48.41","host":"sn.estate.ka ... show more 1 attack(s) detected, such as these: {"event":"nginx_block","ip":"89.169.48.41","host":"sn.estate.kasm.life","request":"GET /tiny.php HTTP/1.1","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36","reason":"service:unknow","timestamp":"2025-11-01T19:20:31 00:00","logentry":"sn.estate.kasm.life 89.169.48.41 - - [01/Nov/2025:19:20:31 0000] GET /tiny.php HTTP/1.1 444 0 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 - matched:service:unknow"} * Report Details : https://p4u.xyz/CQIMSDJWVK3/1 IP Details *: https://p4u.xyz/CQIMSDJWVK3/2 show less	Web Spam Hacking Bad Web Bot
🇺🇸 Gabriel Camargo	2025-10-31 10:05:15 (7 months ago)	89.169.48.41 - - [31/Oct/2025:05:05:14 -0500] "GET /mah.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; ... show more 89.169.48.41 - - [31/Oct/2025:05:05:14 -0500] "GET /mah.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 89.169.48.41 - - [31/Oct/2025:05:05:14 -0500] "GET /chosen.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 89.169.48.41 - - [31/Oct/2025:05:05:14 -0500] "GET /goods.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" ... show less	Brute-Force SSH
🇨🇭 Mario Bretscher	2025-10-31 08:49:53 (7 months ago)	[Fri Oct 31 09:49:49.190601 2025] [php:error] [pid 1456140] [client 89.169.48.41:29851] script '/var ... show more [Fri Oct 31 09:49:49.190601 2025] [php:error] [pid 1456140] [client 89.169.48.41:29851] script '/var/www/html/goods.php' not found or unable to stat [Fri Oct 31 09:49:49.198191 2025] [php:error] [pid 1456387] [client 89.169.48.41:19087] script '/var/www/html/chosen.php' not found or unable to stat [Fri Oct 31 09:49:52.176105 2025] [php:error] [pid 1453872] [client 89.169.48.41:28697] script '/var/www/html/mah.php' not found or unable to stat ... show less	Web App Attack
🇺🇸 octageeks.com	2025-10-31 04:06:06 (7 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇺🇸 rayxis.com	2025-10-30 05:53:52 (7 months ago)	[Thu Oct 30 05:53:50.378563 2025] [proxy_fcgi:error] [pid 1914923:tid 1914954] [client 89.169.48.41: ... show more [Thu Oct 30 05:53:50.378563 2025] [proxy_fcgi:error] [pid 1914923:tid 1914954] [client 89.169.48.41:24411] AH01071: Got error 'Primary script unknown' ... show less	Bad Web Bot Web App Attack
🇬🇧 djboddington	2025-10-30 04:36:33 (7 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-backdoors-attempts	Hacking Exploited Host
🇺🇸 kosada.com	2025-10-29 08:25:58 (7 months ago)	Web vulnerability probing: /xleet.php	Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 40.124.176.81

🇰🇭 220.158.232.154

🇩🇪 213.209.159.40

🇲🇳 203.23.199.88

🇩🇪 193.228.139.227

🇨🇳 118.196.30.45

🇮🇳 115.98.235.102

🇫🇷 91.196.152.105

🇺🇸 66.132.186.128

🇳🇱 45.148.10.183

🇺🇸 43.153.15.51

🇦🇺 35.197.181.173

🇺🇬 196.0.3.188

🇧🇾 178.121.1.139

🇩🇪 116.202.9.157

🇮🇩 114.9.56.178

🇷🇺 109.63.149.121

🇻🇳 103.75.183.113

🇩🇪 94.16.17.141

🇺🇸 66.132.224.20