Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.248.169.12 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-14 05:20:20
89.248.169.94 attackbots
Sep 24 01:38:36 [host] kernel: [1236330.720053] [U
Sep 24 01:42:19 [host] kernel: [1236553.667330] [U
Sep 24 01:56:08 [host] kernel: [1237382.692303] [U
Sep 24 01:57:08 [host] kernel: [1237443.259790] [U
Sep 24 01:58:46 [host] kernel: [1237540.448229] [U
Sep 24 01:59:31 [host] kernel: [1237586.206618] [U
2020-09-25 00:42:28
89.248.169.94 attackbots
Sep 24 01:38:36 [host] kernel: [1236330.720053] [U
Sep 24 01:42:19 [host] kernel: [1236553.667330] [U
Sep 24 01:56:08 [host] kernel: [1237382.692303] [U
Sep 24 01:57:08 [host] kernel: [1237443.259790] [U
Sep 24 01:58:46 [host] kernel: [1237540.448229] [U
Sep 24 01:59:31 [host] kernel: [1237586.206618] [U
2020-09-24 16:21:04
89.248.169.94 attack
Triggered: repeated knocking on closed ports.
2020-09-24 07:47:11
89.248.169.94 attackbots
Sep2019:52:42server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=89.248.169.94DST=136.243.224.57LEN=40TOS=0x00PREC=0x00TTL=249ID=10647PROTO=TCPSPT=51729DPT=9307WINDOW=1024RES=0x00SYNURGP=0Sep2019:52:44server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=89.248.169.94DST=136.243.224.52LEN=40TOS=0x00PREC=0x00TTL=249ID=14257PROTO=TCPSPT=51729DPT=9560WINDOW=1024RES=0x00SYNURGP=0Sep2019:52:51server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=89.248.169.94DST=136.243.224.54LEN=40TOS=0x00PREC=0x00TTL=249ID=40939PROTO=TCPSPT=51729DPT=9271WINDOW=1024RES=0x00SYNURGP=0Sep2019:52:51server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=89.248.169.94DST=136.243.224.53LEN=40TOS=0x00PREC=0x00TTL=249ID=44137PROTO=TCPSPT=51729DPT=9307WINDOW=1024RES=0x00SYNURGP=0Sep2019:52:53server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:
2020-09-21 02:12:13
89.248.169.94 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-20 18:12:46
89.248.169.143 attackspam
TCP ports : 8861 / 9556
2020-09-04 21:17:55
89.248.169.143 attack
" "
2020-09-04 12:56:24
89.248.169.143 attackspambots
Port scan: Attack repeated for 24 hours
2020-09-04 05:26:09
89.248.169.12 attack
TCP port : 3389
2020-09-01 19:58:18
89.248.169.94 attack
Port scan on 3 port(s): 5900 5904 5959
2020-09-01 02:34:00
89.248.169.94 attack
 TCP (SYN) 89.248.169.94:54894 -> port 5901, len 44
2020-08-30 07:58:28
89.248.169.143 attackspambots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-08-19 06:23:52
89.248.169.12 attack
Port Scan
...
2020-08-19 04:33:49
89.248.169.143 attackspambots
Aug 16 13:01:21 game-panel sshd[9963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.248.169.143
Aug 16 13:01:23 game-panel sshd[9963]: Failed password for invalid user web from 89.248.169.143 port 50294 ssh2
Aug 16 13:06:21 game-panel sshd[10209]: Failed password for root from 89.248.169.143 port 57126 ssh2
2020-08-16 21:14:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.248.169.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14495
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.248.169.2.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024121000 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 10 15:32:54 CST 2024
;; MSG SIZE  rcvd: 105
Host info
2.169.248.89.in-addr.arpa domain name pointer scanner.openportstats.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.169.248.89.in-addr.arpa	name = scanner.openportstats.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
123.206.18.49 attackspam
Unauthorized connection attempt detected from IP address 123.206.18.49 to port 2220 [J]
2020-01-31 22:25:44
14.116.187.31 attackspambots
Unauthorized connection attempt detected from IP address 14.116.187.31 to port 2220 [J]
2020-01-31 22:14:41
156.96.62.87 attack
IP: 156.96.62.87
Ports affected
    Simple Mail Transfer (25) 
Abuse Confidence rating 51%
Found in DNSBL('s)
ASN Details
   AS46664 VolumeDrive
   United States (US)
   CIDR 156.96.56.0/21
Log Date: 31/01/2020 10:20:25 AM UTC
2020-01-31 22:49:17
63.81.87.217 attackbotsspam
RBL listed IP. Trying to send Spam. IP autobanned
2020-01-31 22:09:59
61.159.249.153 attack
61.159.249.153 - - \[31/Jan/2020:10:43:41 +0200\] "GET http://www.wujieliulan.com/ HTTP/1.1" 200 381 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/45.0.2454.101 Safari/537.36"
2020-01-31 22:46:35
87.14.85.186 attackspambots
Unauthorized connection attempt detected from IP address 87.14.85.186 to port 80 [J]
2020-01-31 22:24:24
222.186.42.75 attackspam
Jan 31 15:41:36 server2 sshd\[26526\]: User root from 222.186.42.75 not allowed because not listed in AllowUsers
Jan 31 15:41:40 server2 sshd\[26531\]: User root from 222.186.42.75 not allowed because not listed in AllowUsers
Jan 31 15:41:46 server2 sshd\[26533\]: User root from 222.186.42.75 not allowed because not listed in AllowUsers
Jan 31 15:48:13 server2 sshd\[26988\]: User root from 222.186.42.75 not allowed because not listed in AllowUsers
Jan 31 15:48:15 server2 sshd\[26992\]: User root from 222.186.42.75 not allowed because not listed in AllowUsers
Jan 31 15:48:15 server2 sshd\[26990\]: User root from 222.186.42.75 not allowed because not listed in AllowUsers
2020-01-31 22:11:37
80.82.65.122 attackbots
Jan 31 15:33:07 debian-2gb-nbg1-2 kernel: \[2740446.533921\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.65.122 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=52981 PROTO=TCP SPT=52254 DPT=18653 WINDOW=1024 RES=0x00 SYN URGP=0
2020-01-31 22:45:32
72.250.22.156 attackspambots
20/1/31@03:44:36: FAIL: Alarm-Network address from=72.250.22.156
...
2020-01-31 22:12:42
134.209.41.198 attack
Invalid user lab from 134.209.41.198 port 39736
2020-01-31 22:21:54
167.114.152.139 attackbots
Unauthorized connection attempt detected from IP address 167.114.152.139 to port 2220 [J]
2020-01-31 22:26:08
80.76.244.151 attack
Jan 31 10:28:31 firewall sshd[13223]: Invalid user sama from 80.76.244.151
Jan 31 10:28:33 firewall sshd[13223]: Failed password for invalid user sama from 80.76.244.151 port 32869 ssh2
Jan 31 10:31:24 firewall sshd[13302]: Invalid user atma from 80.76.244.151
...
2020-01-31 22:24:55
176.199.47.186 attack
Invalid user akanksha from 176.199.47.186 port 60086
2020-01-31 22:30:58
221.213.75.177 attackspam
Unauthorized connection attempt detected from IP address 221.213.75.177 to port 8118 [J]
2020-01-31 22:39:36
194.223.170.126 attackbotsspam
Jan 31 09:44:13 dcd-gentoo sshd[19153]: Invalid user Administrator from 194.223.170.126 port 52907
Jan 31 09:44:17 dcd-gentoo sshd[19153]: error: PAM: Authentication failure for illegal user Administrator from 194.223.170.126
Jan 31 09:44:13 dcd-gentoo sshd[19153]: Invalid user Administrator from 194.223.170.126 port 52907
Jan 31 09:44:17 dcd-gentoo sshd[19153]: error: PAM: Authentication failure for illegal user Administrator from 194.223.170.126
Jan 31 09:44:13 dcd-gentoo sshd[19153]: Invalid user Administrator from 194.223.170.126 port 52907
Jan 31 09:44:17 dcd-gentoo sshd[19153]: error: PAM: Authentication failure for illegal user Administrator from 194.223.170.126
Jan 31 09:44:17 dcd-gentoo sshd[19153]: Failed keyboard-interactive/pam for invalid user Administrator from 194.223.170.126 port 52907 ssh2
...
2020-01-31 22:22:36

Recently Reported IPs

50.103.222.54 229.161.192.53 224.6.241.171 195.113.89.222
221.251.205.4 154.30.160.134 132.224.106.144 59.55.249.8
45.192.221.41 104.155.243.11 93.42.114.2 238.26.230.221
127.23.233.19 39.5.170.120 81.132.140.138 137.219.148.16
230.71.173.200 212.168.198.251 99.160.98.127 124.160.158.198