JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.58.42.118

89.58.42.118 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 100%: ?

100%

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	v2202607375620477265.happysrv.de
Domain Name	netcup.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.58.42.118

Whois 89.58.42.118

IP Abuse Reports for 89.58.42.118:

This IP address has been reported a total of 65 times from 41 distinct sources. 89.58.42.118 was first reported on August 25th 2026, and the most recent report was 21 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 paissangroup	2026-10-22 17:58:32 (21 minutes ago)	Multiple WAF Violations	Web App Attack
🇵🇱 Budyn	2026-10-22 15:22:28 (2 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.goblinpot.space \| URI: /.env.local \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"89.58.42.118","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e97f68aeed24dd-FRA","Accept":"text\/plain,text\/html,application\/xhtml+xml,application\/xml;q=0.9,\/;q=0.8","Accept-Language":"en-US show less	Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-10-22 14:45:03 (3 hours ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env.local UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 refresh.cx	2026-10-22 14:39:41 (3 hours ago)	{"datetime":"2026-10-22T14:39:40Z","clientRequestHTTPMethodName":"GET","clientRequestHTTPHost":"api. ... show more {"datetime":"2026-10-22T14:39:40Z","clientRequestHTTPMethodName":"GET","clientRequestHTTPHost":"api.refresh.cx","clientRequestPath":"/","edgeResponseStatus":403,"clientIP":"89.58.42.118","clientCountryName":"DE","originResponseStatus":0} x4 show less	Web App Attack Bad Web Bot
🇺🇸 WellSpring	2026-10-22 12:30:45 (5 hours ago)	env leak on wellspr.ing/.env.local — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇵🇱 Budyn	2026-10-22 12:13:11 (6 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cdn.budyn.xyz \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"89.58.42.118","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e86a22dc16e7b4-FRA","Accept":"text\/plain,text\/html,application\/xhtml+xml,application\/xml;q=0.9,\/;q=0.8","Accept-Language":"en-US,en;q=0.5"," show less	Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-10-22 10:02:37 (8 hours ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 2 domain(s) in 0s	Web App Attack
🇵🇱 Budyn	2026-10-22 09:41:14 (8 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.astropot.website \| URI: /.env.local \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"89.58.42.118","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e78b8acdd6dc99-FRA","Accept":"text\/plain,text\/html,application\/xhtml+xml,application\/xml;q=0.9,\/;q=0.8","Accept-Language":"en-U show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-22 02:40:35 (15 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: nexus.teddypot.pro \| URI: /.env.local \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"89.58.42.118","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e5235d2b836cb0-HAM","Accept":"text\/plain,text\/html,application\/xhtml+xml,application\/xml;q=0.9,\/;q=0.8","Accept-Language":"en-US, show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-22 02:16:59 (16 hours ago)	[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 89.58.42.118 - - [22/Oct/2026:04:16:52 +0200] "GET /.env.local HTTP/1.1" 302 7353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" ... show less	Bad Web Bot Web App Attack
🇩🇪 IVski.com	2026-10-22 02:07:44 (16 hours ago)	IVski WAF \| Sensitive file probe detected - looking for .git	Hacking Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-10-22 00:22:36 (17 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇵🇱 Budyn	2026-10-22 00:16:55 (18 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.dont-eat-the-pudding.online \| URI: /.env.local \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"89.58.42.118","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e450e69bd6c0af-HAM","Accept":"text\/plain,text\/html,application\/xhtml+xml,application\/xml;q=0.9,\/;q=0.8","Accept-Lan show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-10-21 22:00:22 (20 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20. show less	Web App Attack SSH Hacking
🇦🇺 Klaverstyn	2026-10-21 19:41:11 (22 hours ago)	Cross-vhost secrets/RCE probing campaign	Web App Attack Hacking

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.211.99.78

🇨🇳 152.136.255.226

🇨🇳 120.48.176.104

🇮🇳 103.174.28.71

🇵🇱 80.238.123.33

🇺🇸 51.81.111.78

🇳🇱 34.187.30.181

🇷🇴 2.57.121.112

🇧🇷 205.210.31.201

🇨🇦 196.242.178.143

🇵🇱 194.180.49.76

🇦🇷 177.136.85.185

🇺🇸 172.68.23.201

🇵🇱 172.64.198.196

🇳🇱 167.71.72.54

🇫🇷 163.5.79.52

🇭🇰 103.243.27.155

🇬🇧 77.67.26.89

🇯🇵 47.74.13.126

🇺🇸 43.159.139.234