JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.89.8.189

64.89.8.189 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 60%: ?

60%

ISP	WorldNet Telecommunications, LLC
Usage Type	Fixed Line ISP
ASN	AS11367
Hostname(s)	64-89-8-189.static.wntpr.net
Domain Name	worldnetpr.com
Country	🇵🇷 Puerto Rico
City	San Juan, San Juan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.89.8.189

Whois 64.89.8.189

IP Abuse Reports for 64.89.8.189:

This IP address has been reported a total of 14 times from 11 distinct sources. 64.89.8.189 was first reported on October 8th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-09 19:00:02 (7 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 integrantservices.com	2026-07-08 16:51:54 (1 day ago)	(wordpress) Failed wordpress login from 64.89.8.189 (PR/Puerto Rico/64-89-8-189.static.wntpr.net)	Brute-Force
Anonymous	2026-07-08 12:19:58 (1 day ago)	64.89.8.189 - - [08/Jul/2026:12:19:57 +0000] "POST /xmlrpc.php HTTP/1.1" 404 7068 "-" "Mozilla/5.0 ( ... show more 64.89.8.189 - - [08/Jul/2026:12:19:57 +0000] "POST /xmlrpc.php HTTP/1.1" 404 7068 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/99.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 oisecnet	2026-07-07 21:03:24 (2 days ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-07-07. 1 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-07-07. 1 requests from this IP. show less	Brute-Force Web App Attack SSH
🇺🇸 TPI-Abuse	2026-07-07 19:15:35 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 64.89.8.189 (64-89-8-189.static.wntpr.net): 1 i ... show more (mod_security) mod_security (id:225170) triggered by 64.89.8.189 (64-89-8-189.static.wntpr.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 15:15:28.976466 2026] [security2:error] [pid 18437:tid 18437] [client 64.89.8.189:55906] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|studioyau.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "studioyau.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ak1QUEVNhqpV4bnf4m6GrAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 stinpriza	2026-07-07 17:17:20 (2 days ago)	Web App Attack	Web App Attack
🇩🇪 4server	2026-07-07 15:14:40 (2 days ago)	[TueJul0717:14:36.0940912026][security2:error][pid1522710:tid1522727][client64.89.8.189:0]ModSecurit ... show more [TueJul0717:14:36.0940912026][security2:error][pid1522710:tid1522727][client64.89.8.189:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mgpublishing.ch\"][uri\"/xmlrpc.php\"][unique_id\"ak0X3KbCEN_Vy9NtvZDq6wAAAAY\"] show less	Port Scan Brute-Force Web App Attack
🇳🇿 Tripwire	2026-07-02 17:44:44 (1 week ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 13:44:11 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 64.89.8.189 (64-89-8-189.static.wntpr.net): 1 i ... show more (mod_security) mod_security (id:225170) triggered by 64.89.8.189 (64-89-8-189.static.wntpr.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 09:44:03.473180 2026] [security2:error] [pid 7912:tid 7920] [client 64.89.8.189:55736] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|darkestmoonart.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "darkestmoonart.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akZrIxWHbKqh3iGB9-J5AwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-02 11:34:32 (1 week ago)	64.89.8.189 - - [02/Jul/2026:11:34:32 +0000] "POST /xmlrpc.php HTTP/1.1" 404 34514 "-" "Mozilla/5.0 ... show more 64.89.8.189 - - [02/Jul/2026:11:34:32 +0000] "POST /xmlrpc.php HTTP/1.1" 404 34514 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/80.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇨🇭 4server	2026-07-01 17:45:05 (1 week ago)	[WedJul0119:45:02.1567092026][security2:error][pid695271:tid695285][client64.89.8.189:0]ModSecurity: ... show more [WedJul0119:45:02.1567092026][security2:error][pid695271:tid695285][client64.89.8.189:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"turismo-marocco-lugano.ch\"][uri\"/xmlrpc.php\"][unique_id\"akVSHi_pcEk51mesy1f_oAAAAAw\"] show less	Hacking Web App Attack
🇺🇸 mnsf	2026-06-30 20:05:46 (1 week ago)	Xmlrpc Caught (7)	Brute-Force Web App Attack
🇬🇧 consul.to	2026-06-30 15:44:28 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 exxos	2025-10-08 15:05:50 (9 months ago)	HTTP1.x attacks	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.182.239.221

🇦🇪 152.32.180.86

🇵🇱 212.127.91.32

🇧🇷 205.210.31.231

🇮🇶 169.224.120.103

🇭🇰 162.251.93.214

🇺🇸 135.237.125.195

🇳🇱 93.123.109.221

🇺🇸 71.6.237.149

🇺🇸 64.112.57.185

🇺🇸 64.62.197.87

🇲🇲 45.41.106.53

🇺🇸 195.184.76.186

🇩🇪 176.97.210.111

🇺🇸 172.245.112.198

🇺🇸 164.90.132.56

🇮🇳 122.187.227.144

🇺🇸 74.7.242.167

🇺🇸 64.112.57.179

🇺🇸 64.112.57.173