AbuseIPDB » 89.249.194.90
89.249.194.90
This IP was reported 7 times. Confidence of
Abuse
is 4% : ?
ISP
Internet Utilities Europe and Asia Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS19148
Domain Name
netutils.io
Country
🇺🇸
United States of America
City
Phoenix, Arizona
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 89.249.194.90 :
This IP address has been reported a total of
7
times from
3 distinct
sources.
89.249.194.90 was first reported on
January 25th 2025 , and the most recent report was
20 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
bigorre.org
2026-08-25 15:51:11
(20 hours ago)
Forbidden access for mozilla/5.0 (compatible; googlebot/2.1; +http://www.google.com/bot.html)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-27 03:52:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 89.249.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 89.249.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 22:52:24.786753 2026] [security2:error] [pid 8338:tid 8400] [client 89.249.194.90:47317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.com"] [uri "/lib../.git/config"] [unique_id "aXg2eL0OPCcnzlQiHbyxpgAAAgw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-13 12:02:53
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 89.249.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 89.249.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 07:02:45.703125 2025] [security2:error] [pid 25935:tid 25935] [client 89.249.194.90:52521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/.env.ftp"] [unique_id "aRXI5fF5KXMTWmK2GIt2wQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-27 20:55:53
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 89.249.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 89.249.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 27 16:55:48.918593 2025] [security2:error] [pid 21107:tid 21107] [client 89.249.194.90:35247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.deandobkin.com"] [uri "/api/.env"] [unique_id "aNhPVG5pGTldyYgC-DTWUAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-03 13:52:53
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.249.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 89.249.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 03 09:52:29.135240 2025] [security2:error] [pid 26211:tid 26327] [client 89.249.194.90:58489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kettlehill.com"] [uri "/.env.bak"] [unique_id "aGaLHcQOsLMMIBLVOcFTCwAAAI4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-29 19:44:33
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.249.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 89.249.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 15:44:24.154905 2025] [security2:error] [pid 3345089:tid 3345089] [client 89.249.194.90:32893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.farmers123.com"] [uri "/.svn/wc.db"] [unique_id "aDi5GL4HjUfB2f2AGuSX7QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-01-25 01:20:20
(1 year ago)
| A web attack returned code 200 (success).
Hacking
SQL Injection
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: