JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.37.63.160

89.37.63.160 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 4%: ?

ISP	Mullvad VPN AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	mullvad.net
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.37.63.160

Whois 89.37.63.160

IP Abuse Reports for 89.37.63.160:

This IP address has been reported a total of 15 times from 11 distinct sources. 89.37.63.160 was first reported on February 24th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 lp	2026-07-19 18:20:42 (4 days ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 89.37.63.160 2026-07-19T19:40:38+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 89.37.63.160 2026-07-19T19:40:38+02:00 vpn Access-Reject 'michele' station: 89.37.63.160 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-07-19 09:20:39 (4 days ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 89.37.63.160 2026-07-19T10:25:07+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 89.37.63.160 2026-07-19T10:25:07+02:00 vpn Access-Reject 'atelier' station: 89.37.63.160 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-07-18 19:49:19 (5 days ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 89.37.63.160 2026-07-18T21:29:06+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 89.37.63.160 2026-07-18T21:29:06+02:00 vpn Access-Reject 'sarah' station: 89.37.63.160 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-07-18 13:49:14 (5 days ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 89.37.63.160 2026-07-18T15:12:36+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 89.37.63.160 2026-07-18T15:12:36+02:00 vpn Access-Reject 'user02' station: 89.37.63.160 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2026-03-05 19:00:19 (4 months ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2025-12-25 04:06:18 (6 months ago)	(mod_security) mod_security (id:211190) triggered by 89.37.63.160 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:211190) triggered by 89.37.63.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 23:06:13.125806 2025] [security2:error] [pid 12208:tid 12223] [client 89.37.63.160:53652] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|www.seips.org\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /viewitem.php?ID=479%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.seips.org"] [uri "/viewitem.php"] [unique_id "aUy4NTDFTMmaB1tVTtPEaQAAAM0"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-12-15 01:21:17 (7 months ago)	IM360 WAF: SQLi vulnerability in aWeb Cart Watching System for Virtuemart v1.0.7 for Joomla! (CVE-20 ... show more IM360 WAF: SQLi vulnerability in aWeb Cart Watching System for Virtuemart v1.0.7 for Joomla! (CVE-2016-10114) MV:com_content' show less	SQL Injection
🇹🇷 Doruk	2025-08-22 18:30:01 (11 months ago)	Unauthorized connection attempt	Brute-Force
Anonymous	2025-07-31 18:25:18 (11 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇳🇱 Mangelot Hosting	2025-07-22 19:24:28 (1 year ago)	(modsecurity) srv102 ModSecurity 89.37.63.160 (SE/Sweden/-): 5 in the last 3600 secs; Ports: ; Dire ... show more (modsecurity) srv102 ModSecurity 89.37.63.160 (SE/Sweden/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 mnsf	2025-07-22 16:05:09 (1 year ago)	Request Overload (110)	Brute-Force Web App Attack
🇮🇪 RoboSOC	2025-07-22 10:18:05 (1 year ago)	ThinkPHP Remote Code Execution Vulnerability , PTR: PTR record not found	Web App Attack
🇫🇷 dynamix	2025-07-22 09:17:10 (1 year ago)	Multiple WAF Violations	Web App Attack
Anonymous	2025-07-22 07:24:30 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2025-02-24 16:20:21 (1 year ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.57

🇺🇸 147.185.132.78

🇨🇳 111.26.80.229

🇺🇸 18.246.171.16

🇳🇴 2620:171:d5:0:9999::106

🇺🇸 216.25.89.116

🇩🇪 195.182.16.23

🇲🇽 187.189.172.60

🇳🇱 172.94.9.89

🇺🇸 147.185.132.109

🇵🇱 109.205.211.211

🇳🇱 91.92.47.120

🇸🇪 90.229.186.166

🇺🇸 66.132.195.84

🇳🇱 45.148.10.141

🇨🇳 218.59.235.170

🇬🇧 213.166.84.53

🇫🇷 213.32.68.76

🇨🇳 111.26.62.37

🇧🇬 79.124.40.110