Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: The Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.248.163.188 botsattackproxy
Vulnerability Scanner
2025-07-10 13:05:41
89.248.163.200 botsattackproxy
Vulnerability Scanner
2024-05-08 12:51:04
89.248.163.200 attack
hacking
2024-02-21 22:20:11
89.248.163.246 attack
Scan port
2023-10-06 14:46:01
89.248.163.8 attack
Scan port
2023-09-21 12:44:28
89.248.163.203 attack
Scan port
2023-09-11 12:33:32
89.248.163.216 attack
Scan port
2023-08-30 20:15:55
89.248.163.57 attack
Scan port
2023-08-23 12:38:04
89.248.163.96 attack
WARNING
4 SSH login failures: Aug 16 18:12:54 nas-0 1 2023-08-16T18:12:54.200564+08:00 sshd 40261 - - error: kex_exchange_identification: banner line contains invalid characters Aug 16 18:12:54 nas-0 1 2023-08-16T18:12:54.200741+08:00sshd 40261 - - banner exchange: Connection from 45.143.201.62 port 65139: invalid format
2023-08-17 00:00:38 (Asia/Shanghai)
2023-08-18 17:31:39
89.248.163.203 attack
Scan port
2023-08-15 12:49:00
89.248.163.19 attack
Scan port
2023-07-25 12:27:01
89.248.163.19 attack
Scan port
2023-07-24 12:16:10
89.248.163.189 attack
1
2023-07-07 10:36:19
89.248.163.204 attack
Scan port
2023-07-03 12:56:04
89.248.163.16 attack
Scan port
2023-06-29 12:51:46
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.248.163.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42931
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.248.163.25.			IN	A

;; AUTHORITY SECTION:
.			129	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024080200 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 02 17:44:32 CST 2024
;; MSG SIZE  rcvd: 106
Host info
Host 25.163.248.89.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 25.163.248.89.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
89.154.112.20 attackbotsspam
Jan 10 05:50:45 grey postfix/smtpd\[32651\]: NOQUEUE: reject: RCPT from a89-154-112-20.cpe.netcabo.pt\[89.154.112.20\]: 554 5.7.1 Service unavailable\; Client host \[89.154.112.20\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?89.154.112.20\; from=\ to=\ proto=ESMTP helo=\
...
2020-01-10 18:03:29
213.32.122.80 attackbots
SIP/5060 Probe, BF, Hack -
2020-01-10 17:55:32
54.39.98.253 attack
Jan 10 01:42:24 mail sshd\[24864\]: Invalid user nagios4 from 54.39.98.253
Jan 10 01:42:24 mail sshd\[24864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.98.253
...
2020-01-10 17:41:42
49.88.112.75 attackbots
Jan 10 07:00:50 vps647732 sshd[16700]: Failed password for root from 49.88.112.75 port 55496 ssh2
Jan 10 07:00:53 vps647732 sshd[16700]: Failed password for root from 49.88.112.75 port 55496 ssh2
...
2020-01-10 17:51:21
14.239.204.101 attackbots
firewall-block, port(s): 1433/tcp
2020-01-10 17:48:07
45.141.86.128 attackspambots
reported_by_cryptodad
2020-01-10 18:01:56
184.105.139.89 attack
1 Attack(s) Detected
[DoS Attack: TCP/UDP Chargen] from source: 184.105.139.89, port 43828, Wednesday, January 01, 2020 22:57:55
2020-01-10 17:57:32
213.230.84.191 attack
Jan 10 05:51:26 grey postfix/smtpd\[395\]: NOQUEUE: reject: RCPT from unknown\[213.230.84.191\]: 554 5.7.1 Service unavailable\; Client host \[213.230.84.191\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=213.230.84.191\; from=\ to=\ proto=ESMTP helo=\<191.64.uzpak.uz\>
...
2020-01-10 17:32:09
181.57.163.122 attackspam
Unauthorized connection attempt from IP address 181.57.163.122 on Port 445(SMB)
2020-01-10 17:48:38
198.108.66.164 attackspam
unauthorized access on port 443 [https] FO
2020-01-10 17:56:14
167.99.65.138 attackbotsspam
Jan  9 20:54:40 sachi sshd\[29322\]: Invalid user admin from 167.99.65.138
Jan  9 20:54:40 sachi sshd\[29322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.65.138
Jan  9 20:54:42 sachi sshd\[29322\]: Failed password for invalid user admin from 167.99.65.138 port 48780 ssh2
Jan  9 20:58:07 sachi sshd\[29641\]: Invalid user geoffrey from 167.99.65.138
Jan  9 20:58:07 sachi sshd\[29641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.65.138
2020-01-10 17:40:49
62.234.31.201 attackspam
Jan 10 06:43:35 woltan sshd[20377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.31.201
2020-01-10 17:46:10
169.197.108.190 attackspambots
unauthorized access on port 443 [https] FO
2020-01-10 17:58:06
177.220.188.59 attack
Tried sshing with brute force.
2020-01-10 17:27:33
178.128.101.79 attackbotsspam
Wordpress Admin Login attack
2020-01-10 17:53:13

Recently Reported IPs

103.87.249.194 203.96.224.42 226.156.136.62 201.191.45.42
112.135.91.222 209.97.151.53 209.97.151.228 209.97.151.67
188.128.50.220 120.245.60.187 56.12.48.0 32.90.43.90
14.161.17.193 10.11.185.94 192.167.21.79 185.63.250.188
112.1.54.8 115.251.16.81 45.36.189.101 7.232.212.175