Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.248.169.12 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-14 05:20:20
89.248.169.94 attackbots
Sep 24 01:38:36 [host] kernel: [1236330.720053] [U
Sep 24 01:42:19 [host] kernel: [1236553.667330] [U
Sep 24 01:56:08 [host] kernel: [1237382.692303] [U
Sep 24 01:57:08 [host] kernel: [1237443.259790] [U
Sep 24 01:58:46 [host] kernel: [1237540.448229] [U
Sep 24 01:59:31 [host] kernel: [1237586.206618] [U
2020-09-25 00:42:28
89.248.169.94 attackbots
Sep 24 01:38:36 [host] kernel: [1236330.720053] [U
Sep 24 01:42:19 [host] kernel: [1236553.667330] [U
Sep 24 01:56:08 [host] kernel: [1237382.692303] [U
Sep 24 01:57:08 [host] kernel: [1237443.259790] [U
Sep 24 01:58:46 [host] kernel: [1237540.448229] [U
Sep 24 01:59:31 [host] kernel: [1237586.206618] [U
2020-09-24 16:21:04
89.248.169.94 attack
Triggered: repeated knocking on closed ports.
2020-09-24 07:47:11
89.248.169.94 attackbots
Sep2019:52:42server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=89.248.169.94DST=136.243.224.57LEN=40TOS=0x00PREC=0x00TTL=249ID=10647PROTO=TCPSPT=51729DPT=9307WINDOW=1024RES=0x00SYNURGP=0Sep2019:52:44server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=89.248.169.94DST=136.243.224.52LEN=40TOS=0x00PREC=0x00TTL=249ID=14257PROTO=TCPSPT=51729DPT=9560WINDOW=1024RES=0x00SYNURGP=0Sep2019:52:51server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=89.248.169.94DST=136.243.224.54LEN=40TOS=0x00PREC=0x00TTL=249ID=40939PROTO=TCPSPT=51729DPT=9271WINDOW=1024RES=0x00SYNURGP=0Sep2019:52:51server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=89.248.169.94DST=136.243.224.53LEN=40TOS=0x00PREC=0x00TTL=249ID=44137PROTO=TCPSPT=51729DPT=9307WINDOW=1024RES=0x00SYNURGP=0Sep2019:52:53server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:
2020-09-21 02:12:13
89.248.169.94 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-20 18:12:46
89.248.169.143 attackspam
TCP ports : 8861 / 9556
2020-09-04 21:17:55
89.248.169.143 attack
" "
2020-09-04 12:56:24
89.248.169.143 attackspambots
Port scan: Attack repeated for 24 hours
2020-09-04 05:26:09
89.248.169.12 attack
TCP port : 3389
2020-09-01 19:58:18
89.248.169.94 attack
Port scan on 3 port(s): 5900 5904 5959
2020-09-01 02:34:00
89.248.169.94 attack
 TCP (SYN) 89.248.169.94:54894 -> port 5901, len 44
2020-08-30 07:58:28
89.248.169.143 attackspambots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-08-19 06:23:52
89.248.169.12 attack
Port Scan
...
2020-08-19 04:33:49
89.248.169.143 attackspambots
Aug 16 13:01:21 game-panel sshd[9963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.248.169.143
Aug 16 13:01:23 game-panel sshd[9963]: Failed password for invalid user web from 89.248.169.143 port 50294 ssh2
Aug 16 13:06:21 game-panel sshd[10209]: Failed password for root from 89.248.169.143 port 57126 ssh2
2020-08-16 21:14:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.248.169.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14495
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.248.169.2.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024121000 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 10 15:32:54 CST 2024
;; MSG SIZE  rcvd: 105
Host info
2.169.248.89.in-addr.arpa domain name pointer scanner.openportstats.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.169.248.89.in-addr.arpa	name = scanner.openportstats.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
133.242.155.85 attack
2020-08-04T23:03:12.510522abusebot-8.cloudsearch.cf sshd[5501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.fm-net.ne.jp  user=root
2020-08-04T23:03:14.663369abusebot-8.cloudsearch.cf sshd[5501]: Failed password for root from 133.242.155.85 port 48242 ssh2
2020-08-04T23:05:52.975238abusebot-8.cloudsearch.cf sshd[5515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.fm-net.ne.jp  user=root
2020-08-04T23:05:54.757346abusebot-8.cloudsearch.cf sshd[5515]: Failed password for root from 133.242.155.85 port 34752 ssh2
2020-08-04T23:08:19.940628abusebot-8.cloudsearch.cf sshd[5545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.fm-net.ne.jp  user=root
2020-08-04T23:08:22.238754abusebot-8.cloudsearch.cf sshd[5545]: Failed password for root from 133.242.155.85 port 49426 ssh2
2020-08-04T23:10:48.230208abusebot-8.cloudsearch.cf sshd[5784]: pam_unix(sshd:auth): 
...
2020-08-05 08:03:26
49.232.39.21 attackbots
Aug  4 18:53:12 mail sshd\[41834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.39.21  user=root
...
2020-08-05 07:48:48
92.63.196.19 attackspam
3389BruteforceStormFW22
2020-08-05 07:52:35
123.207.78.83 attackspam
Aug  4 21:55:29 lukav-desktop sshd\[11309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.78.83  user=root
Aug  4 21:55:31 lukav-desktop sshd\[11309\]: Failed password for root from 123.207.78.83 port 44668 ssh2
Aug  4 22:00:06 lukav-desktop sshd\[11361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.78.83  user=root
Aug  4 22:00:08 lukav-desktop sshd\[11361\]: Failed password for root from 123.207.78.83 port 38590 ssh2
Aug  4 22:04:57 lukav-desktop sshd\[11417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.78.83  user=root
2020-08-05 07:57:06
113.161.53.147 attackspambots
Aug  5 01:39:26 v22019038103785759 sshd\[15779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.53.147  user=root
Aug  5 01:39:27 v22019038103785759 sshd\[15779\]: Failed password for root from 113.161.53.147 port 57269 ssh2
Aug  5 01:42:25 v22019038103785759 sshd\[15850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.53.147  user=root
Aug  5 01:42:28 v22019038103785759 sshd\[15850\]: Failed password for root from 113.161.53.147 port 47961 ssh2
Aug  5 01:45:36 v22019038103785759 sshd\[16026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.53.147  user=root
...
2020-08-05 07:50:28
203.3.84.204 attackbotsspam
Aug  1 23:39:08 prox sshd[15943]: Failed password for root from 203.3.84.204 port 36131 ssh2
2020-08-05 07:58:39
187.114.191.227 attackspam
1596563606 - 08/04/2020 19:53:26 Host: 187.114.191.227/187.114.191.227 Port: 445 TCP Blocked
2020-08-05 08:11:52
197.255.160.226 attackspambots
Aug  4 22:17:42 mout sshd[26285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.255.160.226  user=root
Aug  4 22:17:43 mout sshd[26285]: Failed password for root from 197.255.160.226 port 40892 ssh2
2020-08-05 07:55:18
106.52.106.61 attackspam
Aug  5 01:53:04 fhem-rasp sshd[8781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61  user=root
Aug  5 01:53:05 fhem-rasp sshd[8781]: Failed password for root from 106.52.106.61 port 40134 ssh2
...
2020-08-05 08:02:32
117.194.117.145 attackbots
1596563603 - 08/04/2020 19:53:23 Host: 117.194.117.145/117.194.117.145 Port: 445 TCP Blocked
2020-08-05 08:14:35
139.155.74.13 attackspambots
MLV GET /wp-login.php
2020-08-05 07:43:38
111.72.197.221 attackbotsspam
Aug  4 20:16:50 srv01 postfix/smtpd\[26896\]: warning: unknown\[111.72.197.221\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  4 20:17:02 srv01 postfix/smtpd\[26896\]: warning: unknown\[111.72.197.221\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  4 20:17:19 srv01 postfix/smtpd\[26896\]: warning: unknown\[111.72.197.221\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  4 20:17:38 srv01 postfix/smtpd\[26896\]: warning: unknown\[111.72.197.221\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  4 20:17:52 srv01 postfix/smtpd\[26896\]: warning: unknown\[111.72.197.221\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-05 08:08:51
222.186.173.226 attackspam
Aug  5 02:57:29 ift sshd\[64709\]: Failed password for root from 222.186.173.226 port 47481 ssh2Aug  5 02:57:42 ift sshd\[64709\]: Failed password for root from 222.186.173.226 port 47481 ssh2Aug  5 02:57:47 ift sshd\[64732\]: Failed password for root from 222.186.173.226 port 19391 ssh2Aug  5 02:57:58 ift sshd\[64732\]: Failed password for root from 222.186.173.226 port 19391 ssh2Aug  5 02:58:00 ift sshd\[64732\]: Failed password for root from 222.186.173.226 port 19391 ssh2
...
2020-08-05 08:00:18
162.244.93.110 attackspam
SpamScore above: 10.0
2020-08-05 08:07:25
36.57.88.53 attackbotsspam
Aug  4 21:14:57 srv01 postfix/smtpd\[9579\]: warning: unknown\[36.57.88.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  4 21:15:09 srv01 postfix/smtpd\[9579\]: warning: unknown\[36.57.88.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  4 21:15:25 srv01 postfix/smtpd\[9579\]: warning: unknown\[36.57.88.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  4 21:15:44 srv01 postfix/smtpd\[9579\]: warning: unknown\[36.57.88.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  4 21:15:56 srv01 postfix/smtpd\[9579\]: warning: unknown\[36.57.88.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-05 08:08:17

Recently Reported IPs

50.103.222.54 229.161.192.53 224.6.241.171 195.113.89.222
221.251.205.4 154.30.160.134 132.224.106.144 59.55.249.8
45.192.221.41 104.155.243.11 93.42.114.2 238.26.230.221
127.23.233.19 39.5.170.120 81.132.140.138 137.219.148.16
230.71.173.200 212.168.198.251 99.160.98.127 124.160.158.198