JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

89.208.69.41

Neutral Activity

Abuse confidence score ?

0% Low Risk

37 reports

16 reporters · latest 1 year ago

ISP	Azerta.ru hosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS12695
Domain Name	azerta.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

89.208.69.41 has been reported 37 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 89.208.69.41

Export CSV

This IP address has been reported a total of 37 times from 16 distinct sources. 89.208.69.41 was first reported on September 23rd 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 jjnxpct	2025-09-25 03:45:14 (1 year ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env (Rule ID: 210492) show less	Hacking Web App Attack
🇪🇸 masterguru	2025-09-24 21:26:53 (1 year ago)	Restricted File Access Attempt. Matched phrase "/.env" at REQUEST_FILENAME. (930130-122)	Hacking Web App Attack
🇨🇭 zynex	2025-09-24 19:37:20 (1 year ago)	URL Probing: /.env	Web App Attack
🇩🇪 Bedios GmbH	2025-09-24 15:39:54 (1 year ago)	Login credentials theft attempt	Hacking
🇩🇪 hbrks	2025-09-24 14:57:36 (1 year ago)	2 attack(s) detected since 2025-09-24T14:44:06.082Z, such as these: {"event":"nginx_block","ip":"89. ... show more 2 attack(s) detected since 2025-09-24T14:44:06.082Z, such as these: {"event":"nginx_block","ip":"89.208.69.41","host":"gp.estate.kasm.life","request":"GET /.env HTTP/1.1","user_agent":"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50","reason":"request:malformed","timestamp":"2025-09-24T14:44:05 00:00","logentry":"gp.estate.kasm.life 89.208.69.41 - - [24/Sep/2025:14:44:05 0000] GET /.env HTTP/1.1 403 153 - Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50 - matched:request:malformed"} Report Details: https://p4u.xyz/H062G6NKDRX/1IP Details: https://p4u.xyz/H062G6NKDRX/2 show less	Web Spam Hacking Bad Web Bot
🇨🇦 polycoda	2025-09-24 11:09:14 (1 year ago)	🧭 vhost fuzzing	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-09-24 07:36:06 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.208.69.41 (db-a1.kinderfantasia.com): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 89.208.69.41 (db-a1.kinderfantasia.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 03:36:01.370780 2025] [security2:error] [pid 14045:tid 14045] [client 89.208.69.41:60362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bangbi.com"] [uri "/.env"] [unique_id "aNOfYYqgbWTNwM2Q84RcJAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-24 07:04:18 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.208.69.41 (db-a1.kinderfantasia.com): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 89.208.69.41 (db-a1.kinderfantasia.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 03:04:12.161138 2025] [security2:error] [pid 7319:tid 7319] [client 89.208.69.41:59136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "platformintelligence.com"] [uri "/.env"] [unique_id "aNOX7Pcd1hYhtRh-CGJDVQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2025-09-24 06:31:36 (1 year ago)	(modsecurity) srv103 ModSecurity 89.208.69.41 (RU/Russia/db-a1.kinderfantasia.com): 5 in the last 36 ... show more (modsecurity) srv103 ModSecurity 89.208.69.41 (RU/Russia/db-a1.kinderfantasia.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2025-09-24 05:57:02 (1 year ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-09-24 04:40:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.208.69.41 (db-a1.kinderfantasia.com): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 89.208.69.41 (db-a1.kinderfantasia.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 00:40:06.654695 2025] [security2:error] [pid 31883:tid 31883] [client 89.208.69.41:52773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alosi.us"] [uri "/.env"] [unique_id "aNN2JsY0vivkAJB7edOCHAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2025-09-24 04:35:47 (1 year ago)		Web App Attack
🇳🇱 jjnxpct	2025-09-24 03:45:05 (1 year ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env (Rule ID: 210492) show less	Hacking Web App Attack
🇮🇹 Progetto1	2025-09-24 01:54:03 (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-09-24 01:36:54 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 89.208.69.41 (db-a1.kinderfantasia.com): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 89.208.69.41 (db-a1.kinderfantasia.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 21:36:48.893570 2025] [security2:error] [pid 5072:tid 5072] [client 89.208.69.41:62259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ohiobabe.com"] [uri "/.env"] [unique_id "aNNLMA7kAXugcb6JY8Qh5gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.153.143

🇲🇽 201.105.221.7

🇷🇺 195.19.127.113

🇨🇱 181.226.216.124

🇧🇷 177.200.35.125

🇮🇩 125.165.42.118

🇨🇳 124.31.106.49

🇰🇷 121.131.241.55

🇦🇺 115.130.107.15

🇺🇸 104.222.43.95

🇸🇬 43.172.194.147

🇻🇪 38.76.138.168

🇴🇲 5.37.254.245

🇲🇽 189.161.111.143

🇧🇷 168.194.164.3

🇮🇳 150.129.104.88

🇵🇭 124.217.54.92

🇺🇸 91.230.168.254

🇺🇸 72.240.125.133

🇫🇷 51.91.97.227