JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.45.45.234

89.45.45.234 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 100%: ?

100%

ISP	2E Telekomunikasyon LTD. STI.
Usage Type	Fixed Line ISP
ASN	AS209604
Domain Name	2etelekom.com
Country	🇹🇷 Turkey
City	Bursa, Bursa Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.45.45.234

Whois 89.45.45.234

IP Abuse Reports for 89.45.45.234:

This IP address has been reported a total of 75 times from 64 distinct sources. 89.45.45.234 was first reported on August 22nd 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 BenTahily	2026-08-23 07:00:25 (16 hours ago)	[moaem.com] Banned by Fail2Ban jails: sshd-aggressive. Automated report.	Brute-Force SSH
🇭🇰 ncsr-sec	2026-08-22 21:37:06 (1 day ago)	Attacked NCSR.CN production server: SSH brute-force / web scanning / honeypot trips. fail2ban banned ... show more Attacked NCSR.CN production server: SSH brute-force / web scanning / honeypot trips. fail2ban banned. Evidence in server logs. show less	Brute-Force Web App Attack
🇦🇺 dyln	2026-08-22 21:00:37 (1 day ago)	Dyls honeypot brute-force: SSH (458 total hits)	Brute-Force SSH
🇳🇱 e.fierstra	2026-08-22 20:52:45 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 ut-addicted.com	2026-08-22 20:41:25 (1 day ago)	\[Sat Aug 22 22:41:24.097994 2026\] \[:error\] \[pid 30253:tid 140352451180288\] \[client 89.45.45.2 ... show more \[Sat Aug 22 22:41:24.097994 2026\] \[:error\] \[pid 30253:tid 140352451180288\] \[client 89.45.45.234:44978\] \[client 89.45.45.234\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 28\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/hello.world"\] \[unique_id "aooJdBYibtE68QjHQaMIegAAANE"\] show less	Brute-Force Web App Attack
🇺🇸 yzfdude1	2026-08-22 20:38:39 (1 day ago)	2026-08-22T14:36:37.126173-06:00 b146-66 sshd[237613]: pam_sss(sshd:auth): authentication failure; l ... show more 2026-08-22T14:36:37.126173-06:00 b146-66 sshd[237613]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.45.45.234 user=admin 2026-08-22T14:36:38.914560-06:00 b146-66 sshd[237613]: Failed password for invalid user admin from 89.45.45.234 port 41488 ssh2 2026-08-22T14:38:38.485648-06:00 b146-66 sshd[238495]: Invalid user user from 89.45.45.234 port 43048 ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-08-22 20:38:17 (1 day ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 xmission.com	2026-08-22 20:36:00 (1 day ago)	Blocked by UFW (TCP on 22) Source port: 41552 TTL: 51 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 41552 TTL: 51 Packet length: 40 TOS: 0x00 This report (for 89.45.45.234) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇧🇷 chronos	2026-08-22 20:28:34 (1 day ago)	Generic malicious activity: ALERT: External attempt to access critical TCP port... \| Port: 22 \| Prot ... show more Generic malicious activity: ALERT: External attempt to access critical TCP port... \| Port: 22 \| Proto: TCP \| Location: Türkiye, Istanbul show less	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-08-22 20:23:49 (1 day ago)	(mod_security) mod_security (id:218420) triggered by 89.45.45.234 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:218420) triggered by 89.45.45.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 16:23:42.348956 2026] [security2:error] [pid 20626:tid 20626] [client 89.45.45.234:37608] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.60:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.60"] [uri "/hello.world"] [unique_id "aooFTj0IrmWp9f9j2UTN2QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 masterguru	2026-08-22 20:17:13 (1 day ago)	Host header is a numeric IP address. Pattern match "^ (920350-164)	Hacking Bad Web Bot
🇺🇸 LotPhantom	2026-08-22 20:08:24 (1 day ago)	2026-08-22T20:07:50.013794+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-08-22T20:07:50.013794+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=89.45.45.234 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=1917 PROTO=TCP SPT=45449 DPT=2375 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-22T20:07:50.013820+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=89.45.45.234 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=1917 PROTO=TCP SPT=45449 DPT=2375 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 helios.live	2026-08-22 20:03:20 (1 day ago)	2026-08-22T20:01:32.131165+00:00 kocer-main-webserver sshd[1739407]: Invalid user admin from 89.45.4 ... show more 2026-08-22T20:01:32.131165+00:00 kocer-main-webserver sshd[1739407]: Invalid user admin from 89.45.45.234 port 47396 2026-08-22T20:01:32.500761+00:00 kocer-main-webserver sshd[1739407]: Connection closed by invalid user admin 89.45.45.234 port 47396 [preauth] 2026-08-22T20:03:19.940098+00:00 kocer-main-webserver sshd[1739580]: Invalid user user from 89.45.45.234 port 48896 ... show less	Brute-Force SSH
🇩🇪 EarlyOwl	2026-08-22 20:03:16 (1 day ago)	2026-08-22T20:03:16.207272+00:00 mail sshd[8736]: Invalid user admin from 89.45.45.234 port 37240 .. ... show more 2026-08-22T20:03:16.207272+00:00 mail sshd[8736]: Invalid user admin from 89.45.45.234 port 37240 ... show less	Brute-Force SSH
🇷🇺 lns.bz	2026-08-22 20:01:59 (1 day ago)	SSH bruteforce [RU.VDS]	SSH

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 179.60.253.140

🇭🇰 156.225.1.98

🇩🇪 134.122.67.177

🇨🇳 121.227.235.105

🇺🇸 104.248.62.223

🇮🇳 27.7.136.228

🇷🇺 5.140.72.201

🇩🇪 134.209.240.74

🇭🇰 101.36.121.72

🇺🇸 100.36.187.172

🇭🇰 42.200.66.164

🇳🇱 217.105.93.200

🇺🇸 209.139.49.203

🇦🇷 200.63.111.99

🇬🇧 154.16.44.52

🇬🇧 35.203.210.211

🇩🇪 135.125.235.107

🇬🇧 109.228.37.185

🇧🇩 103.183.62.1

🇺🇸 3.130.168.2