JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.37.173.30

89.37.173.30 was found in our database!

This IP was reported 240 times. Confidence of Abuse is 1%: ?

ISP	Hydra Communications Ltd
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	30.173.37.89.baremetal.zare.com
Domain Name	zare.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.37.173.30

Whois 89.37.173.30

IP Abuse Reports for 89.37.173.30:

This IP address has been reported a total of 240 times from 66 distinct sources. 89.37.173.30 was first reported on May 1st 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-06 12:02:25 (3 weeks ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 mind5t0rm	2026-05-06 13:58:07 (2 months ago)	(XMLRPC,WPLOGIN) Login failure/trigger from 89.37.173.30 (CH/Switzerland/30.173.37.89.baremetal.zare ... show more (XMLRPC,WPLOGIN) Login failure/trigger from 89.37.173.30 (CH/Switzerland/30.173.37.89.baremetal.zare.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 89.37.173.30 - - [06/May/2026:20:57:57 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 89.37.173.30 - - [06/May/2026:20:58:00 +0700] "POST /wp-login.php HTTP/2.0" 200 2458 "https://ddha.eu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 89.37.173.30 - - [06/May/2026:20:58:02 +0700] "POST /wp-login.php HTTP/2.0" 200 2458 "https://ddha.eu/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" show less	Port Scan
🇯🇵 demonsword	2026-05-04 14:20:17 (2 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: example.com:443 show less	Open Proxy Port Scan
Anonymous	2026-04-26 11:01:26 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-04-25 10:57:44 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 dynamix	2026-04-07 11:22:26 (3 months ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Savvii	2026-04-07 08:47:53 (3 months ago)	20 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 05:41:09 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 89.37.173.30 (30.173.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:240000) triggered by 89.37.173.30 (30.173.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 01:41:02.647365 2026] [security2:error] [pid 1415968:tid 1415968] [client 89.37.173.30:45898] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|swiss-pac.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "swiss-pac.com"] [uri "/images/stories/themes.php"] [unique_id "adSY7o6FNDzSPvOYikl2IQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 14:33:44 (3 months ago)	(mod_security) mod_security (id:240000) triggered by 89.37.173.30 (30.173.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:240000) triggered by 89.37.173.30 (30.173.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 10:33:38.627942 2026] [security2:error] [pid 54163:tid 54163] [client 89.37.173.30:51032] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|mnalabama.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "mnalabama.com"] [uri "/images/stories/themes.php"] [unique_id "adPEQrCNtjRl9RqpdczkDwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-04-04 21:31:06 (3 months ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2026-04-01 22:54:12 (3 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-03-09 17:40:06 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 xmission.com	2026-03-07 19:13:08 (4 months ago)	Blocked by UFW (TCP on 1) Source port: 55116 TTL: 102 Packet length: 52 TOS: 0x0A This report (for ... show more Blocked by UFW (TCP on 1) Source port: 55116 TTL: 102 Packet length: 52 TOS: 0x0A This report (for 89.37.173.30) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-03-06 17:35:16 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-28 16:40:08 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking

Showing 1 to 15 of 240 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.37.116.106

🇮🇳 116.193.139.134

🇺🇸 85.208.96.206

🇬🇧 35.203.210.208

🇩🇪 212.227.101.234

🇺🇸 192.178.115.222

🇧🇷 187.6.121.246

🇫🇷 185.101.254.47

🇬🇧 64.137.93.18

🇫🇷 54.38.180.48

🇺🇸 45.79.153.72

🇮🇳 2404:6800:4000:101f::12e

🇧🇷 189.113.47.155

🇧🇷 177.174.89.99

🇨🇳 115.50.253.75

🇨🇳 106.13.209.152

🇸🇳 41.208.147.131

🇬🇧 35.203.210.220

🇸🇪 31.208.108.219

🇹🇷 185.200.36.42