JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.126.211.166

89.126.211.166 was found in our database!

This IP was reported 198 times. Confidence of Abuse is 100%: ?

100%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202660
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.126.211.166

Whois 89.126.211.166

IP Abuse Reports for 89.126.211.166:

This IP address has been reported a total of 198 times from 154 distinct sources. 89.126.211.166 was first reported on July 1st 2026, and the most recent report was 56 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-03 23:53:01 (56 minutes ago)	[Sat Jul 04 01:52:59.693815 2026] [proxy_fcgi:error] [pid 316872:tid 316986] [client 89.126.211.166: ... show more [Sat Jul 04 01:52:59.693815 2026] [proxy_fcgi:error] [pid 316872:tid 316986] [client 89.126.211.166:45650] AH01071: Got error 'Primary script unknown' [Sat Jul 04 01:52:59.809441 2026] [proxy_fcgi:error] [pid 316872:tid 316965] [client 89.126.211.166:45650] AH01071: Got error 'Primary script unknown' [Sat Jul 04 01:52:59.930670 2026] [proxy_fcgi:error] [pid 316872:tid 316995] [client 89.126.211.166:45650] AH01071: Got error 'Primary script unknown' [Sat Jul 04 01:53:00.035569 2026] [proxy_fcgi:error] [pid 316872:tid 316993] [client 89.126.211.166:45650] AH01071: Got error 'Primary script unknown' [Sat Jul 04 01:53:00.152596 2026] [proxy_fcgi:error] [pid 316872:tid 316968] [client 89.126.211.166:45650] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇩🇪 Viveronese	2026-07-03 23:45:47 (1 hour ago)	HTTP vulnerability scanning	Web App Attack
🇯🇵 pixelboost.kr	2026-07-03 23:40:31 (1 hour ago)	89.126.211.166 - - [04/Jul/2026:08:40:29 +0900] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more 89.126.211.166 - - [04/Jul/2026:08:40:29 +0900] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" 89.126.211.166 - - [04/Jul/2026:08:40:30 +0900] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 150 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-03 23:28:38 (1 hour ago)	89.126.211.166 - - [03/Jul/2026:23:28:38 +0000] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Ut ... show more 89.126.211.166 - - [03/Jul/2026:23:28:38 +0000] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" "-" "91.98.135.170" ... show less	Hacking Bad Web Bot Web App Attack
🇦🇹 urnilxfgbez	2026-07-03 22:45:00 (2 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇮🇹 alph44	2026-07-03 21:54:20 (2 hours ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇧🇷 ItsClairton	2026-07-03 19:39:17 (5 hours ago)	Jul 3 16:37:37 proxy-03 sshd[2438668]: Invalid user orangepi from 89.126.211.166 port 59562 Jul 3 ... show more Jul 3 16:37:37 proxy-03 sshd[2438668]: Invalid user orangepi from 89.126.211.166 port 59562 Jul 3 16:37:37 proxy-03 sshd[2438668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.126.211.166 Jul 3 16:37:39 proxy-03 sshd[2438668]: Failed password for invalid user orangepi from 89.126.211.166 port 59562 ssh2 Jul 3 16:39:14 proxy-03 sshd[2440801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.126.211.166 user=root Jul 3 16:39:15 proxy-03 sshd[2440801]: Failed password for root from 89.126.211.166 port 59478 ssh2 ... show less	Brute-Force SSH
🇫🇷 Petre 21_ip	2026-07-03 19:25:25 (5 hours ago)	2026-07-03T21:25:24.664490+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-03T21:25:24.664490+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=89.126.211.166 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=56886 PROTO=TCP SPT=62094 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 pm33	2026-07-03 19:03:46 (5 hours ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇺🇸 jkhorvath.com	2026-07-03 18:22:25 (6 hours ago)	Request for URL /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh	Phishing Brute-Force Web App Attack
🇩🇪 Tamsweb	2026-07-03 18:18:02 (6 hours ago)	Unauthorized connection attempt or scan from 89.126.211.166 on port 2375 ...	Port Scan
🇹🇭 MWA SOC	2026-07-03 17:42:27 (7 hours ago)		Hacking
🇳🇱 i-turnradio.nl	2026-07-03 16:48:38 (8 hours ago)	2026-07-03 @ 18:48:38 (CET) ~ Blocked for trying to access: /hello.world?%ADd+allow_url_include%3d1+ ... show more 2026-07-03 @ 18:48:38 (CET) ~ Blocked for trying to access: /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp:/input show less	Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-07-03 16:12:02 (8 hours ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 Gabriel Camargo	2026-07-03 15:59:17 (8 hours ago)	89.126.211.166 - - [03/Jul/2026:10:59:16 -0500] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more 89.126.211.166 - - [03/Jul/2026:10:59:16 -0500] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" 89.126.211.166 - - [03/Jul/2026:10:59:17 -0500] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 166 "-" "-" 89.126.211.166 - - [03/Jul/2026:10:59:17 -0500] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 162 "-" "libredtail-http" ... show less	Brute-Force SSH

Showing 1 to 15 of 198 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.212.91.18

🇨🇳 218.65.105.118

🇺🇸 205.210.31.39

🇮🇳 198.105.113.10

🇳🇱 185.136.15.12

🇬🇧 154.16.44.119

🇨🇳 116.179.32.93

🇻🇳 116.110.5.154

🇻🇳 116.99.172.214

🇮🇳 45.123.110.70

🇸🇬 43.156.212.86

🇭🇰 199.45.154.185

🇲🇽 189.216.235.57

🇨🇳 139.170.73.147

🇨🇳 112.123.228.180

🇫🇷 104.28.155.132

🇮🇳 103.176.160.146

🇸🇬 103.7.11.134

🇫🇷 91.196.152.238

🇷🇺 90.151.171.108