JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.37.66.156

89.37.66.156 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	Hydra Communications Ltd
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	156.66.37.89.baremetal.zare.com
Domain Name	hydracom.co.uk
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Glasgow, Scotland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.37.66.156

Whois 89.37.66.156

IP Abuse Reports for 89.37.66.156:

This IP address has been reported a total of 18 times from 6 distinct sources. 89.37.66.156 was first reported on May 15th 2021, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Ba-Yu	2025-09-23 19:20:32 (11 months ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
Anonymous	2025-02-11 18:33:16 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-01-29 03:52:02 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 28 22:51:55.755696 2025] [security2:error] [pid 13892:tid 13903] [client 89.37.66.156:35717] [client 89.37.66.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|killasgarage.bike\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "killasgarage.bike"] [uri "/about/trackback/"] [unique_id "Z5ml23T02mcztGCbz7eTSwAAAQk"], referer: http://killasgarage.bike/about/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-26 03:25:46 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 25 22:25:39.138038 2025] [security2:error] [pid 16736:tid 16736] [client 89.37.66.156:39894] [client 89.37.66.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.oliverhardy.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.oliverhardy.com"] [uri "/"] [unique_id "Z5WrM-ITnVaWl12YY2aExAAAAAk"], referer: http://www.oliverhardy.com/?unapproved=378266&moderation-hash=92c629fbb2d3dd1ec75b3a7e725de69c%2Ftrackback%2F show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 london2038.com	2024-12-15 06:09:05 (1 year ago)	Malformed or malicious web request 89.37.66.156 - - [15/Dec/2024:07:09:00 +0100] "POST /trackback/ H ... show more Malformed or malicious web request 89.37.66.156 - - [15/Dec/2024:07:09:00 +0100] "POST /trackback/ HTTP/1.1" 404 39194 "https://<REDACTED>/trackback/" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.2.23) Gecko/20110920 Firefox/3.6.23" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-12-14 12:09:07 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 14 07:09:02.673747 2024] [security2:error] [pid 17923:tid 17923] [client 89.37.66.156:49445] [client 89.37.66.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|bigchus.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "bigchus.com"] [uri "/caleidoscopia/wp-trackback.php"] [unique_id "Z111XlHxJdWt41BVsAi6rAAAABw"], referer: http://bigchus.com/caleidoscopia/wp-trackback.php?p=135 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-19 22:47:17 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 19 17:47:10.190238 2024] [security2:error] [pid 21611:tid 21634] [client 89.37.66.156:50307] [client 89.37.66.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|vivierae.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "vivierae.com"] [uri "/amenities/trackback/"] [unique_id "Zz0Vbuc6xJmxJLea2O-7MwAAABQ"], referer: http://vivierae.com/amenities/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-13 07:32:58 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 02:32:52.246905 2024] [security2:error] [pid 9393:tid 9393] [client 89.37.66.156:50598] [client 89.37.66.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|aquasafedemo.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "aquasafedemo.com"] [uri "/support.html/trackback/"] [unique_id "ZzRWJEpxojE6RjHrwC5uFgAAAAk"], referer: http://aquasafedemo.com/support.html/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-13 00:19:50 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 19:19:45.718079 2024] [security2:error] [pid 19658:tid 19658] [client 89.37.66.156:53360] [client 89.37.66.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|carmikdesign.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "carmikdesign.com"] [uri "/web-design/how-much-does-a-website-cost/trackback/"] [unique_id "ZzPwoefuQ5C_mOkj4pM9jwAAAAg"], referer: http://carmikdesign.com/web-design/how-much-does-a-website-cost/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-12 23:51:59 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 18:51:54.107999 2024] [security2:error] [pid 25982:tid 25982] [client 89.37.66.156:36089] [client 89.37.66.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|geckoturner.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "geckoturner.com"] [uri "/contact/trackback/"] [unique_id "ZzPqGm3vxA7yX8k6gEOdowAAAAA"], referer: http://geckoturner.com/contact/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-12 23:33:22 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 18:33:10.969337 2024] [security2:error] [pid 7060:tid 7060] [client 89.37.66.156:44240] [client 89.37.66.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|maycockfamily.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "maycockfamily.com"] [uri "/blog/uncategorized/hello-world/trackback/"] [unique_id "ZzPltobYsyHsWKGhDKAkXgAAAAE"], referer: http://maycockfamily.com/blog/uncategorized/hello-world/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-11 17:20:48 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 12:20:41.676885 2024] [security2:error] [pid 28205:tid 28205] [client 89.37.66.156:53480] [client 89.37.66.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|mdp-interiors.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "mdp-interiors.com"] [uri "/contact.html/trackback/"] [unique_id "ZzI86TbcuoE_QlXTOdim5AAAAAs"], referer: http://mdp-interiors.com/contact.html/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-05 20:54:50 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 15:54:42.299813 2024] [security2:error] [pid 4352:tid 4352] [client 89.37.66.156:33697] [client 89.37.66.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|cwidisplays.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "cwidisplays.com"] [uri "/trackback/"] [unique_id "ZyqGEkYiQzVtY-IV1slarAAAAAE"], referer: http://cwidisplays.com/trackback/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2024-05-07 10:08:39 (2 years ago)		Web Spam
🇺🇸 TPI-Abuse	2024-04-07 20:26:43 (2 years ago)	(mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): ... show more (mod_security) mod_security (id:210740) triggered by 89.37.66.156 (156.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 07 16:26:30.290331 2024] [security2:error] [pid 13137] [client 89.37.66.156:49718] [client 89.37.66.156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.thejuniverse.org\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.thejuniverse.org"] [uri "/trackback/"] [unique_id "ZhMBdiee-bF-hekemgSTOQAAAAM"], referer: http://www.thejuniverse.org/trackback/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 135.237.125.135

🇵🇰 103.82.120.129

🇿🇦 102.64.42.234

🇺🇸 91.230.168.249

🇮🇳 223.181.87.185

🇨🇳 221.0.11.226

🇱🇹 213.176.26.94

🇬🇧 213.166.84.49

🇦🇷 200.59.127.139

🇳🇱 195.178.110.30

🇬🇧 195.140.214.29

🇮🇳 122.187.230.20

🇰🇪 102.208.164.224

🇹🇷 94.154.43.191

🇷🇺 89.109.51.75

🇩🇪 85.215.124.148

🇮🇳 66.116.241.89

🇺🇸 54.166.249.45

🇸🇬 47.84.184.157

🇮🇳 15.207.117.57