JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.37.63.57

89.37.63.57 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 32%: ?

32%

ISP	Mullvad VPN AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	mullvad.net
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.37.63.57

Whois 89.37.63.57

IP Abuse Reports for 89.37.63.57:

This IP address has been reported a total of 16 times from 9 distinct sources. 89.37.63.57 was first reported on April 14th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-07 20:14:49 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 16:14:45.358580 2026] [security2:error] [pid 15565:tid 15565] [client 89.37.63.57:39364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dmasoftlab.com"] [uri "/.git/index"] [unique_id "ak1eNekYZQoG0mxouGyAJQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 19:36:18 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 15:36:12.288576 2026] [security2:error] [pid 20076:tid 20076] [client 89.37.63.57:40306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digdesign.com"] [uri "/.git/index"] [unique_id "ak1VLPM7txZ5tO6wrmVkQQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-07-07 19:17:31 (4 hours ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-07-07 19:16:19 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 15:16:16.212679 2026] [security2:error] [pid 19138:tid 19205] [client 89.37.63.57:38926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deyyoungart.com"] [uri "/.git/index"] [unique_id "ak1QgOUtdBYQZahAvyB6hQAAARY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-07 18:44:05 (5 hours ago)	Try to access /.git/index	Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 18:37:16 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 14:37:08.550806 2026] [security2:error] [pid 31737:tid 31737] [client 89.37.63.57:56916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "connectigramme.com"] [uri "/.git/index"] [unique_id "ak1HVOrI_D0w7UEjTkamAQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-07-07 17:44:17 (6 hours ago)	136 requests with url.path .git/	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-07 17:33:33 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 13:33:25.399110 2026] [security2:error] [pid 25199:tid 25199] [client 89.37.63.57:54418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cmcnow.com"] [uri "/.git/index"] [unique_id "ak04ZcbhBtS1WezKeFo4sQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 17:10:10 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 13:10:04.914444 2026] [security2:error] [pid 11443:tid 11443] [client 89.37.63.57:59398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clayrivers.com"] [uri "/.git/index"] [unique_id "ak0y7Kj8xSZh2P6IHwVUKwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 16:34:49 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 89.37.63.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 12:34:43.523416 2026] [security2:error] [pid 7503:tid 7541] [client 89.37.63.57:36378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cibernetic.com"] [uri "/.git/index"] [unique_id "ak0qoznaGiZ-KhP-53msyAAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-31 15:57:13 (3 months ago)	2026-03-31 15:57:13 warning[2133816]: host unknown[89.37.63.57]: unauthorized access attem ... show more 2026-03-31 15:57:13 warning[2133816]: host unknown[89.37.63.57]: unauthorized access attempted: tcp/16881 show less	Port Scan Brute-Force
🇺🇸 xmission.com	2026-01-16 17:59:44 (5 months ago)	Blocked by UFW (TCP on 59249) Source port: 60094 TTL: 43 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 59249) Source port: 60094 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 89.37.63.57) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 Burayot	2025-11-21 03:34:45 (7 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 89.37.63.57 (SE/Sweden/-): 1 in the ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 89.37.63.57 (SE/Sweden/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 Rayulcifer	2025-06-26 01:32:24 (1 year ago)	89.37.63.57 - - [25/Jun/2025:20:32:05 -0500] "CONNECT 212.82.100.137:443 HTTP/1.0" 502 604 "-" "-" 8 ... show more 89.37.63.57 - - [25/Jun/2025:20:32:05 -0500] "CONNECT 212.82.100.137:443 HTTP/1.0" 502 604 "-" "-" 89.37.63.57 - - [25/Jun/2025:20:32:23 -0500] "CONNECT 5.102.173.68:443 HTTP/1.0" 502 602 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 Rayulcifer	2025-06-24 06:19:32 (1 year ago)	89.37.63.57 - - [24/Jun/2025:01:19:20 -0500] "CONNECT 108.157.229.107:443 HTTP/1.0" 502 605 "-" "-" ... show more 89.37.63.57 - - [24/Jun/2025:01:19:20 -0500] "CONNECT 108.157.229.107:443 HTTP/1.0" 502 605 "-" "-" 89.37.63.57 - - [24/Jun/2025:01:19:32 -0500] "CONNECT 213.180.204.242:443 HTTP/1.0" 502 605 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇳🇱 193.176.31.251

🇮🇩 180.252.91.50

🇺🇸 173.252.69.130

🇵🇰 119.156.189.184

🇮🇩 103.242.105.199

🇷🇴 92.118.39.171

🇸🇾 89.43.133.135

🇺🇸 44.217.255.167

🇺🇸 3.94.182.91

🇩🇪 217.160.35.149

🇬🇧 213.166.84.38

🇦🇿 212.47.128.159

🇿🇦 197.95.78.142

🇷🇺 193.168.176.173

🇦🇴 193.163.125.143

🇺🇸 185.126.181.39

🇨🇳 180.143.59.102

🇷🇺 178.170.251.102

🇫🇮 178.20.210.208