JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.37.63.117

89.37.63.117 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 42%: ?

42%

ISP	Mullvad VPN AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	mullvad.net
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.37.63.117

Whois 89.37.63.117

IP Abuse Reports for 89.37.63.117:

This IP address has been reported a total of 23 times from 16 distinct sources. 89.37.63.117 was first reported on May 3rd 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-25 06:31:17 (12 hours ago)	Brute force	Brute-Force
🇺🇸 jsjdmediallc	2026-07-24 21:40:04 (21 hours ago)	Auto-blocked: score 19 (threshold 10). Tier: HIGH. Hits: 3. Flags: git-exposure. Paths: /.git/index, ... show more Auto-blocked: score 19 (threshold 10). Tier: HIGH. Hits: 3. Flags: git-exposure. Paths: /.git/index, /.git/index, /.git/index show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 21:26:21 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 17:26:13.703251 2026] [security2:error] [pid 421071:tid 421071] [client 89.37.63.117:40576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "assistfeed.com"] [uri "/.git/index"] [unique_id "amPYdVt_vICr9PFer3m34gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Smish	2026-07-24 21:05:52 (22 hours ago)	HONEYPOT HIT --> Fail2ban time=1784927150 log=2026-07-24T22:05:50+01:00 ip=89.37.63.117 host=as21066 ... show more HONEYPOT HIT --> Fail2ban time=1784927150 log=2026-07-24T22:05:50+01:00 ip=89.37.63.117 host=as210667.net method=GET uri="/.git/index" status=404 ua="moving-to-bins/1.0" ref="-" rid=fb4b4ff869d6b840ae701d7a82e2373a show less	Web App Attack
🇺🇸 Major Hostility	2026-07-24 20:49:22 (22 hours ago)	"GET /.git/index HTTP/1.1" 404 "GET /.git/index HTTP/1.1" 404	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 20:44:44 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 16:44:36.287595 2026] [security2:error] [pid 273633:tid 273662] [client 89.37.63.117:39770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arrowsinthequiver.com"] [uri "/.git/index"] [unique_id "amPOtKlttaIiwBO9PYovcAAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 15:08:10 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:08:02.083443 2026] [security2:error] [pid 1766:tid 1786] [client 89.37.63.117:54606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "faimreps.com"] [uri "/.git/index"] [unique_id "ai1yUuV514EO4NLS50im6AAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2026-06-13 15:08:00 (1 month ago)	WAF (2) - Malicious activity detected: URL probing.	Bad Web Bot Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-13 14:23:46 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 10:23:38.587267 2026] [security2:error] [pid 27744:tid 27744] [client 89.37.63.117:37408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bddev.com"] [uri "/.git/index"] [unique_id "ai1n6pxdEAd5Zs2uQtflrwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 14:01:52 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 10:01:45.568897 2026] [security2:error] [pid 4025:tid 4025] [client 89.37.63.117:50842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barkdull.org"] [uri "/.git/index"] [unique_id "ai1iyQigT_T_6jjapRtK2gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇺 bcsaba	2026-06-13 13:46:52 (1 month ago)	Probing for .git: 89.37.63.117 - - [13/Jun/2026:15:46:50 +0200] "GET /.git/index HTTP/2.0" 403 146 " ... show more Probing for .git: 89.37.63.117 - - [13/Jun/2026:15:46:50 +0200] "GET /.git/index HTTP/2.0" 403 146 "-" "moving-to-bins/1.0" show less	Web App Attack
🇺🇸 mnsf	2026-06-13 13:07:01 (1 month ago)	Abuse Detected (3)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 12:22:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:22:45.325640 2026] [security2:error] [pid 1695:tid 1695] [client 89.37.63.117:40286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "assistfeed.com"] [uri "/.git/index"] [unique_id "ai1LlQrUbAewfnxR9EL5yAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 11:50:12 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 07:50:07.143535 2026] [security2:error] [pid 10429:tid 10429] [client 89.37.63.117:33480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artbyrt.com"] [uri "/.git/index"] [unique_id "ai1D7zrvb125iVPjB9lS8AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 11:27:44 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 07:27:40.609962 2026] [security2:error] [pid 25711:tid 25711] [client 89.37.63.117:60818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "architech.com"] [uri "/.git/index"] [unique_id "ai0-rAo03SFG3VpvTDW7ggAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.73

🇳🇱 192.253.248.7

🇮🇳 182.71.135.110

🇵🇱 176.53.159.198

🇩🇪 167.94.145.26

🇳🇱 91.92.47.128

🇻🇳 42.1.65.123

🇩🇪 164.92.140.160

🇳🇱 158.94.210.216

🇺🇸 147.185.132.157

🇪🇸 46.24.47.94

🇪🇬 41.47.233.193

🇧🇷 187.62.87.27

🇺🇦 185.212.251.21

🇭🇰 172.253.6.16

🇮🇩 160.187.165.50

🇨🇳 115.190.50.19

🇵🇰 103.166.103.173

🇰🇷 58.229.253.119

🇷🇺 46.8.3.170