JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.36.76.132

89.36.76.132 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 45%: ?

45%

ISP	M247 LTD Berlin Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.36.76.132

Whois 89.36.76.132

IP Abuse Reports for 89.36.76.132:

This IP address has been reported a total of 124 times from 24 distinct sources. 89.36.76.132 was first reported on June 14th 2022, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-24 00:27:39 (11 hours ago)	Blocked by UFW (TCP on 18899) Source port: 58580 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 18899) Source port: 58580 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 89.36.76.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-23 12:56:30 (23 hours ago)	(mod_security) mod_security (id:240335) triggered by 89.36.76.132 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 89.36.76.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 08:56:22.216006 2026] [security2:error] [pid 23030:tid 23030] [client 89.36.76.132:10152] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 89.36.76.132 (+1 hits since last alert)\|thepercussionworks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thepercussionworks.com"] [uri "/xmlrpc.php"] [unique_id "ajqCdmmxsBAkWpUsT2CtiAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-23 07:54:19 (1 day ago)	Blocked by UFW (TCP on 18899) Source port: 5051 TTL: 45 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 18899) Source port: 5051 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 89.36.76.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-22 19:02:37 (1 day ago)	Blocked by UFW (TCP on 51413) Source port: 30842 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 30842 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 89.36.76.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-22 01:01:41 (2 days ago)	Blocked by UFW (TCP on 18899) Source port: 57971 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 18899) Source port: 57971 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 89.36.76.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-21 03:22:39 (3 days ago)	Blocked by UFW (TCP on 18899) Source port: 20613 TTL: 46 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 18899) Source port: 20613 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 89.36.76.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-20 08:57:19 (4 days ago)	Blocked by UFW (TCP on 18899) Source port: 23576 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 18899) Source port: 23576 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 89.36.76.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-19 17:25:33 (4 days ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 16:14:31 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 89.36.76.132 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 89.36.76.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 12:14:23.248570 2026] [security2:error] [pid 2715:tid 2715] [client 89.36.76.132:62898] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 89.36.76.132 (+1 hits since last alert)\|stacyfarm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stacyfarm.com"] [uri "/xmlrpc.php"] [unique_id "ajVq35WWEVrVQfo6S0lhBwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 15:44:17 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 89.36.76.132 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 89.36.76.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 11:44:12.721313 2026] [security2:error] [pid 20222:tid 20222] [client 89.36.76.132:63366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 89.36.76.132 (+1 hits since last alert)\|takeapawsboston.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "takeapawsboston.com"] [uri "/xmlrpc.php"] [unique_id "ajVjzOtNnBRCHjLi9ERROAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 14:02:00 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 89.36.76.132 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 89.36.76.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 10:01:53.914028 2026] [security2:error] [pid 24707:tid 24707] [client 89.36.76.132:47254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 89.36.76.132 (+1 hits since last alert)\|rajabarber.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rajabarber.com"] [uri "/xmlrpc.php"] [unique_id "ajVL0dddWTjjEw6rKAd9vAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-19 07:36:59 (5 days ago)	Blocked by UFW (TCP on 18899) Source port: 10213 TTL: 46 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 18899) Source port: 10213 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 89.36.76.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-17 22:55:19 (6 days ago)	Blocked by UFW (TCP on 18899) Source port: 1884 TTL: 45 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 18899) Source port: 1884 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 89.36.76.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-17 07:51:59 (1 week ago)	Blocked by UFW (TCP on 18899) Source port: 16911 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 18899) Source port: 16911 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 89.36.76.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-16 11:33:39 (1 week ago)	Blocked by UFW (TCP on 18899) Source port: 42489 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 18899) Source port: 42489 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 89.36.76.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.9.225.142

🇮🇳 182.76.86.130

🇺🇸 107.150.96.39

🇮🇩 103.84.7.190

🇳🇱 93.174.95.106

🇺🇸 91.230.168.212

🇱🇹 45.227.254.170

🇳🇱 45.148.10.141

🇺🇸 34.19.127.192

🇭🇰 199.45.155.106

🇹🇭 182.53.207.106

🇧🇬 162.158.210.232

🇧🇬 151.237.115.206

🇺🇸 139.5.104.132

🇺🇸 119.13.198.249

🇳🇱 102.135.43.159

🇺🇸 45.156.129.76

🇰🇷 211.178.247.182

🇺🇸 184.105.247.208

🇮🇳 182.95.47.2