This IP address has been reported a total of
4
times from
4 distinct
sources.
89.93.219.99 was first reported on
August 20th 2026 , and the most recent report was
3 weeks ago United States of America
with 3
reports;
Germany
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
2
times;
Web App Attack
2
times;
Hacking
1
time;
SQL Injection
1
time;
DDoS Attack
1
time;
Other
1
time.
Old Reports
The most recent abuse report for this IP address is from
3 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
eacontent
2026-09-09 09:23:00
(3 weeks ago)
[Wed Sep 09 00:58:32.814725 2026] [security2:error] [pid 4860:tid 4895] [client 89.93.219.99:45596] ...
show more
[Wed Sep 09 00:58:32.814725 2026] [security2:error] [pid 4860:tid 4895] [client 89.93.219.99:45596] [client 89.93.219.99] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'n)&(n' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: n)&(n found within ARGS:view_archive: \\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527)/**/AND/**/(\\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527ydtypw\\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527=\\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527ydtypw\\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527/**/UNION/**/ALL/**/SELECT/**/\\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527ndvnzosbodheunpoukbpcrjwmojtzumd\\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527--/**/h9ctqc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-09-04 00:22:35
(4 weeks ago)
(mod_security) mod_security (id:220150) triggered by 89.93.219.99 (89-93-219-99.hfc.dyn.abo.bbox.fr) ...
show more
(mod_security) mod_security (id:220150) triggered by 89.93.219.99 (89-93-219-99.hfc.dyn.abo.bbox.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 20:22:30.616333 2026] [security2:error] [pid 19508:tid 19508] [client 89.93.219.99:48228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\*.{0,399}\\\\*\\\\/)?select)" at ARGS:C. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.scoutinsignia.com|F|2"] [data "')/**/and/**/('uszhnx'='uszhnx'/**/union/**/all/**/select/**/'qmeuirnbqfrgsjldmbcadhkvjzqjoaqn'--/**/m6xhd1"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.scoutinsignia.com"] [uri "/pubs/"] [unique_id "apoPRvfoI8fzbdPvNGgVmAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-29 22:35:34
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-08-20 16:31:51
(1 month ago)
Web App Attack, Hacking
Hacking
Web App Attack
Showing 1 to
4
of 4 reports
