Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Oulu

Region: Northern Ostrobothnia

Country: Finland

Internet Service Provider: DNA

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.166.142.101 attackspambots
2019-10-21 x@x
2019-10-21 12:33:12 unexpected disconnection while reading SMTP command from dyndsl-089-166-142-101.ewe-ip-backbone.de [89.166.142.101]:40355 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-10-21 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=89.166.142.101
2019-10-21 20:47:50
89.166.145.142 attackspambots
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/89.166.145.142/ 
 DE - 1H : (61)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : DE 
 NAME ASN : ASN9145 
 
 IP : 89.166.145.142 
 
 CIDR : 89.166.128.0/17 
 
 PREFIX COUNT : 38 
 
 UNIQUE IP COUNT : 768768 
 
 
 WYKRYTE ATAKI Z ASN9145 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 2 
 
 DateTime : 2019-10-18 13:33:55 
 
 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery
2019-10-19 02:37:03
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.166.14.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36070
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;89.166.14.138.			IN	A

;; AUTHORITY SECTION:
.			525	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090101 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 02 08:27:23 CST 2020
;; MSG SIZE  rcvd: 117
Host info
138.14.166.89.in-addr.arpa domain name pointer 89-166-14-138.bb.dnainternet.fi.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.14.166.89.in-addr.arpa	name = 89-166-14-138.bb.dnainternet.fi.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
95.70.128.210 attack
php WP PHPmyadamin ABUSE blocked for 12h
2020-06-26 02:20:56
167.71.102.17 attackbotsspam
167.71.102.17 - - [25/Jun/2020:18:26:47 +0100] "POST /wp-login.php HTTP/1.1" 200 4433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.71.102.17 - - [25/Jun/2020:18:26:48 +0100] "POST /wp-login.php HTTP/1.1" 200 4433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.71.102.17 - - [25/Jun/2020:18:26:48 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-06-26 01:52:39
162.243.130.226 attack
162.243.130.226 - - - [25/Jun/2020:14:22:53 +0200] "GET / HTTP/1.1" 404 162 "-" "Mozilla/5.0 zgrab/0.x" "-" "-"
2020-06-26 02:27:08
162.243.50.8 attackspambots
Jun 25 16:20:46 electroncash sshd[3579]: Failed password for invalid user student from 162.243.50.8 port 44128 ssh2
Jun 25 16:24:28 electroncash sshd[4520]: Invalid user data from 162.243.50.8 port 43384
Jun 25 16:24:28 electroncash sshd[4520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.50.8 
Jun 25 16:24:28 electroncash sshd[4520]: Invalid user data from 162.243.50.8 port 43384
Jun 25 16:24:30 electroncash sshd[4520]: Failed password for invalid user data from 162.243.50.8 port 43384 ssh2
...
2020-06-26 01:45:48
47.75.172.46 attackbots
WordPress login Brute force / Web App Attack on client site.
2020-06-26 02:06:22
123.157.78.171 attackbotsspam
Invalid user public from 123.157.78.171 port 39168
2020-06-26 01:57:23
34.229.66.73 attack
Jun 24 23:11:36 server6 sshd[27606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-34-229-66-73.compute-1.amazonaws.com
Jun 24 23:11:38 server6 sshd[27606]: Failed password for invalid user ghostname from 34.229.66.73 port 38174 ssh2
Jun 24 23:11:38 server6 sshd[27606]: Received disconnect from 34.229.66.73: 11: Bye Bye [preauth]
Jun 24 23:34:23 server6 sshd[22343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-34-229-66-73.compute-1.amazonaws.com
Jun 24 23:34:25 server6 sshd[22343]: Failed password for invalid user ftpuser from 34.229.66.73 port 59760 ssh2
Jun 24 23:34:25 server6 sshd[22343]: Received disconnect from 34.229.66.73: 11: Bye Bye [preauth]
Jun 24 23:45:09 server6 sshd[3174]: Connection closed by 34.229.66.73 [preauth]
Jun 24 23:54:35 server6 sshd[25871]: Connection closed by 34.229.66.73 [preauth]
Jun 25 00:04:08 server6 sshd[3237]: pam_unix(sshd:auth): authenticati........
-------------------------------
2020-06-26 01:57:59
222.186.173.154 attack
Jun 25 19:44:04 vm1 sshd[26222]: Failed password for root from 222.186.173.154 port 38974 ssh2
Jun 25 19:44:16 vm1 sshd[26222]: error: maximum authentication attempts exceeded for root from 222.186.173.154 port 38974 ssh2 [preauth]
...
2020-06-26 01:46:45
37.187.181.182 attackspambots
Failed password for invalid user stue from 37.187.181.182 port 38444 ssh2
2020-06-26 01:58:53
116.177.20.50 attack
Jun 25 12:17:31 XXXXXX sshd[62251]: Invalid user ese from 116.177.20.50 port 63657
2020-06-26 02:12:20
138.204.100.70 attackspam
Jun 25 02:19:03 php1 sshd\[31729\]: Invalid user cyr from 138.204.100.70
Jun 25 02:19:03 php1 sshd\[31729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.100.70
Jun 25 02:19:05 php1 sshd\[31729\]: Failed password for invalid user cyr from 138.204.100.70 port 54092 ssh2
Jun 25 02:22:59 php1 sshd\[32016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.100.70  user=root
Jun 25 02:23:01 php1 sshd\[32016\]: Failed password for root from 138.204.100.70 port 53922 ssh2
2020-06-26 02:20:09
119.123.225.175 attack
Invalid user postgres from 119.123.225.175 port 47924
2020-06-26 02:16:54
111.48.54.18 attackbots
 TCP (SYN) 111.48.54.18:48248 -> port 6949, len 44
2020-06-26 02:19:16
159.65.219.210 attackspam
[ssh] SSH attack
2020-06-26 01:47:33
193.27.229.73 attackspambots
Brute forcing RDP port 3389
2020-06-26 02:13:40

Recently Reported IPs

86.109.48.149 97.187.135.57 97.213.176.106 182.227.101.222
162.1.7.135 210.45.175.7 100.249.41.99 197.51.181.79
156.195.85.7 193.235.172.140 44.236.154.44 131.242.22.159
220.80.122.211 14.253.7.21 180.186.91.60 13.234.186.29
213.31.245.208 99.3.146.17 180.143.96.2 13.76.212.215