JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.66.89.102

195.66.89.102 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 72%: ?

72%

ISP	Eniseyneftegas Territorial Industrial Technical Management of Communication LLC
Usage Type	Fixed Line ISP
ASN	AS39121
Domain Name	tptus.ru
Country	🇷🇺 Russian Federation
City	Yeniseysk, Krasnoyarsk Krai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.66.89.102

Whois 195.66.89.102

IP Abuse Reports for 195.66.89.102:

This IP address has been reported a total of 18 times from 13 distinct sources. 195.66.89.102 was first reported on August 30th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-17 10:15:16 (8 hours ago)	(mod_security) mod_security (id:225170) triggered by 195.66.89.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 195.66.89.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:15:11.128356 2026] [security2:error] [pid 32015:tid 32015] [client 195.66.89.102:25320] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|smartradios.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "smartradios.info"] [uri "/wp-json/wp/v2/users"] [unique_id "atNKry2mEYwoP_wR-cl0kQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RAP	2026-10-17 05:30:23 (12 hours ago)	2026-10-17 05:30:23 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 nationaleventpros.com	2026-10-17 03:01:08 (15 hours ago)	WordPress login attempt	Brute-Force
🇬🇧 Nov	2026-10-16 22:41:34 (19 hours ago)	Unauthorized access attempt (tcp/23)	Port Scan
🇫🇷 security.rdmc.fr	2026-10-16 20:40:53 (21 hours ago)	Port Scan Attack proto:TCP src:49890 dst:23	Port Scan
🇺🇸 TPI-Abuse	2026-10-15 01:03:57 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 195.66.89.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 195.66.89.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:03:51.460997 2026] [security2:error] [pid 18074:tid 18074] [client 195.66.89.102:53972] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atAmd39etIa0F5OkIFFJAgAAAAw"], referer: https://jolankagroup.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2026-10-10 08:59:37 (1 week ago)	2026-10-10 10:59:24 +02:00 - Unsolicited TCP connection to a honeypot port; probing port 23.	Port Scan
Anonymous	2026-10-10 00:29:19 (1 week ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇩🇪 Tsumugi Kotobuki	2026-10-10 00:14:03 (1 week ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 55 \| Len: 60B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 55 \| Len: 60B \| Win: 65535(1) \| F2B/ufw-honeypot@2026-10-10T00:14:02Z show less	Port Scan Hacking
Anonymous	2026-10-09 21:38:29 (1 week ago)	Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 47858 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Rep ... show more Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 47858 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇫🇷 security.rdmc.fr	2026-10-09 19:13:24 (1 week ago)	Port Scan Attack proto:TCP src:37276 dst:23	Port Scan
🇲🇹 Malta	2026-10-08 10:54:22 (1 week ago)	195.66.89.102 - - [08/Oct/2026:12:54:22 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 195.66.89.102 - - [08/Oct/2026:12:54:22 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 big-cloud.nl	2026-10-03 14:19:07 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 鬼影233	2026-09-23 10:08:10 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 10:38:36 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.217

🇰🇷 119.201.147.249

🇨🇳 114.132.92.120

🇺🇸 108.59.244.5

🇹🇷 94.55.225.176

🇵🇱 77.91.122.4

🇱🇹 77.90.185.20

🇩🇪 64.89.163.167

🇸🇬 47.128.61.242

🇳🇱 45.148.10.152

🇹🇷 31.145.131.202

🇷🇺 213.33.210.63

🇬🇧 185.91.69.248

🇸🇬 118.139.164.171

🇰🇷 112.151.168.124

🇸🇮 102.220.160.29

🇮🇹 87.16.112.235

🇰🇷 220.124.226.145

🇨🇳 59.49.229.59

🇦🇷 38.211.32.169