AbuseIPDB » 90.188.243.239
90.188.243.239
This IP was reported 8 times. Confidence of
Abuse
is 34% : ?
ISP
OJSC Sibirtelecom
Usage Type
Fixed Line ISP
ASN
AS12389
Domain Name
irtel.ru
Country
🇷🇺
Russian Federation
City
Irkutsk, Irkutsk Oblast
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 90.188.243.239 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
90.188.243.239 was first reported on
November 22nd 2025 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇹🇼
kk_it_man
2026-07-25 06:30:07
(3 days ago)
honey catch
Port Scan
🇺🇸
RAP
2026-07-25 03:56:34
(4 days ago)
2026-07-25 03:56:34 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸
RAP
2026-07-25 00:01:47
(4 days ago)
2026-07-25 00:01:47 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
2026-07-24 20:32:12
(4 days ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇩🇪
centurion
2026-07-24 18:41:33
(4 days ago)
Blocked by UFW on ns02 [23/tcp] Source port: 16400 TTL: 53 Packet length: 60 TOS: 0x00 This report ...
show more
Blocked by UFW on ns02 [23/tcp] Source port: 16400 TTL: 53 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-06-11 06:24:57
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 90.188.243.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 90.188.243.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 02:24:51.321642 2026] [security2:error] [pid 26355:tid 26372] [client 90.188.243.239:3762] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gafm.org|F|2"] [data ".gafm.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gafm.org"] [uri "/www.GAFM.com"] [unique_id "aipUs5d8oo1UJg3Q9DXoSwAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rayulcifer
2026-04-01 18:07:39
(3 months ago)
90.188.243.239 - - [01/Apr/2026:13:07:30 -0500] "GET http://maxcdn.bootstrapcdn.com/font-awesome/4.3 ...
show more
90.188.243.239 - - [01/Apr/2026:13:07:30 -0500] "GET http://maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css?ver=4.9.8 HTTP/1.1" 200 908 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
90.188.243.239 - - [01/Apr/2026:13:07:38 -0500] "GET http://maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css?ver=4.9.8 HTTP/1.1" 200 908 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
2025-11-22 05:24:35
(8 months ago)
scanning http requests from known botnet
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: