JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.37.66.92

89.37.66.92 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 36%: ?

36%

ISP	Hydra Communications Ltd
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	92.66.37.89.baremetal.zare.com
Domain Name	hydracom.co.uk
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Glasgow, Scotland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.37.66.92

Whois 89.37.66.92

IP Abuse Reports for 89.37.66.92:

This IP address has been reported a total of 38 times from 7 distinct sources. 89.37.66.92 was first reported on May 31st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ipblock.com	2026-08-24 04:43:00 (1 day ago)	IPBlock protected site ID [4055-d][s=06]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 07:54:06 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 89.37.66.92 (92.66.37.89.baremetal.zare.com): 1 ... show more (mod_security) mod_security (id:240335) triggered by 89.37.66.92 (92.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 03:54:00.873664 2026] [security2:error] [pid 29224:tid 29224] [client 89.37.66.92:59746] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 89.37.66.92 (+1 hits since last alert)\|honigcpa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "honigcpa.com"] [uri "/xmlrpc.php"] [unique_id "aogEGD2GX7hxmCkY-nRNCAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-08-21 04:00:00 (4 days ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -72.434 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -72.434 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0. show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-20 19:23:58 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 89.37.66.92 (92.66.37.89.baremetal.zare.com): 1 ... show more (mod_security) mod_security (id:240335) triggered by 89.37.66.92 (92.66.37.89.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 15:23:50.522210 2026] [security2:error] [pid 778:tid 898] [client 89.37.66.92:42714] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 89.37.66.92 (+1 hits since last alert)\|atlasrecordssearch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "atlasrecordssearch.com"] [uri "/xmlrpc.php"] [unique_id "aodURuje4QFsOIAQjKoW7AAAANg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-08-20 03:58:10 (5 days ago)	[19/Aug/2026:23:57:27.261769 --0400] aoZ7J1sDgXrVGIHIs7qtawAAAU4 89.37.66.92 40148 127.0.0.1 7081 [1 ... show more [19/Aug/2026:23:57:27.261769 --0400] aoZ7J1sDgXrVGIHIs7qtawAAAU4 89.37.66.92 40148 127.0.0.1 7081 [19/Aug/2026:23:57:37.837982 --0400] aoZ7MbfLpVqitS5OoVivDgAAAhY 89.37.66.92 52328 127.0.0.1 7081 [19/Aug/2026:23:57:48.420344 --0400] aoZ7PFsDgXrVGIHIs7qtwgAAAUo 89.37.66.92 40686 127.0.0.1 7081 [19/Aug/2026:23:57:59.052424 --0400] aoZ7R7fLpVqitS5OoVivVAAAAgY 89.37.66.92 50316 127.0.0.1 7081 [19/Aug/2026:23:58:09.646860 --0400] aoZ7UcnsSV7MdWx8MLk1wAAAAkA 89.37.66.92 36108 127.0.0.1 7081 ... show less	DDoS Attack Brute-Force
🇨🇦 Anytech	2026-08-20 03:56:40 (5 days ago)	Blocked by ConnMonitor	Web App Attack
🇩🇪 Lino Project	2026-06-27 12:09:40 (1 month ago)	89.37.66.92 - - [27/Jun/2026:14:09:39 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primob ... show more 89.37.66.92 - - [27/Jun/2026:14:09:39 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primobio.it/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-06-25 10:02:20 (2 months ago)	89.37.66.92 - - [25/Jun/2026:12:02:19 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6539 "https:/ ... show more 89.37.66.92 - - [25/Jun/2026:12:02:19 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6539 "https://www.primobio.it/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-06-25 04:32:40 (2 months ago)	89.37.66.92 - - [25/Jun/2026:06:32:39 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6539 "https:/ ... show more 89.37.66.92 - - [25/Jun/2026:06:32:39 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6539 "https://www.primobio.it/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-06-22 06:41:57 (2 months ago)	89.37.66.92 - - [22/Jun/2026:08:41:55 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6539 "https:/ ... show more 89.37.66.92 - - [22/Jun/2026:08:41:55 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6539 "https://www.primobio.it/mio-account/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-06-21 17:57:46 (2 months ago)	89.37.66.92 - - [21/Jun/2026:19:57:44 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primob ... show more 89.37.66.92 - - [21/Jun/2026:19:57:44 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primobio.it/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-06-21 17:25:37 (2 months ago)	89.37.66.92 - - [21/Jun/2026:19:25:36 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primob ... show more 89.37.66.92 - - [21/Jun/2026:19:25:36 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primobio.it/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-06-21 04:27:26 (2 months ago)	89.37.66.92 - - [21/Jun/2026:06:27:26 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primob ... show more 89.37.66.92 - - [21/Jun/2026:06:27:26 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primobio.it/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-06-20 07:30:31 (2 months ago)	89.37.66.92 - - [20/Jun/2026:09:30:30 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primob ... show more 89.37.66.92 - - [20/Jun/2026:09:30:30 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primobio.it/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-06-19 12:57:15 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from GB. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from GB. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.3 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 80.223.201.173

🇺🇸 2601:147:4b80:24:20c:29ff:feb0:e225

🇵🇰 203.128.6.156

🇩🇪 167.94.146.34

🇹🇼 123.58.196.28

🇨🇳 116.179.37.111

🇧🇬 79.124.49.90

🇺🇦 46.201.142.152

🇳🇱 45.148.10.141

🇰🇷 43.108.46.233

🇺🇸 34.171.140.124

🇬🇧 185.247.137.201

🇮🇳 182.78.86.62

🇺🇸 167.94.138.22

🇻🇳 103.199.19.253

🇨🇦 85.217.149.62

🇳🇱 45.156.128.103

🇺🇸 35.245.110.51

🇱🇹 213.176.26.194

🇨🇦 185.98.171.91