Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Utrecht

Region: Utrecht

Country: The Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.248.172.16 attack
Bap IP
2024-05-12 23:39:04
89.248.172.140 attackbots
Automatic report - Port Scan
2020-10-13 20:36:52
89.248.172.140 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 2468 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 12:08:47
89.248.172.140 attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 7110 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 04:58:27
89.248.172.16 attack
ET DROP Dshield Block Listed Source group 1 - port: 60001 proto: tcp cat: Misc Attackbytes: 60
2020-10-11 03:06:34
89.248.172.16 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-10 18:56:46
89.248.172.16 attackbotsspam
- Port=2081
2020-10-08 03:13:38
89.248.172.16 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 8089 proto: tcp cat: Misc Attackbytes: 60
2020-10-07 19:27:51
89.248.172.85 attackbots
scans 5 times in preceeding hours on the ports (in chronological order) 28589 10777 30026 10201 30103 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 07:13:00
89.248.172.140 attack
scans 10 times in preceeding hours on the ports (in chronological order) 2728 4590 4446 3410 20222 1983 5656 6300 2728 3031 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 06:47:26
89.248.172.85 attack
 TCP (SYN) 89.248.172.85:50104 -> port 30009, len 44
2020-09-30 23:39:40
89.248.172.140 attackspam
 TCP (SYN) 89.248.172.140:44912 -> port 3410, len 44
2020-09-30 23:10:43
89.248.172.140 attack
firewall-block, port(s): 1983/tcp, 3450/tcp, 5656/tcp
2020-09-30 15:44:03
89.248.172.140 attackbots
 TCP (SYN) 89.248.172.140:47677 -> port 2000, len 44
2020-09-21 20:38:47
89.248.172.140 attackbots
ET DROP Dshield Block Listed Source group 1 - port: 5566 proto: tcp cat: Misc Attackbytes: 60
2020-09-21 12:30:09
Whois info:
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '89.248.172.0 - 89.248.172.255'

% Abuse contact for '89.248.172.0 - 89.248.172.255' is 'abuse@ipvolume.net'

inetnum:        89.248.172.0 - 89.248.172.255
netname:        NET-2-172
descr:          IPV NETBLOCK
country:        NL
geoloc:         52.370216 4.895168
org:            ORG-IVI1-RIPE
admin-c:        IVI24-RIPE
tech-c:         IVI24-RIPE
status:         ASSIGNED PA
mnt-by:         IPV
mnt-lower:      IPV
mnt-routes:     IPV
created:        2019-02-03T20:55:31Z
last-modified:  2019-02-03T20:55:31Z
source:         RIPE

organisation:   ORG-IVI1-RIPE
org-name:       IP Volume inc
country:        SC
reg-nr:         203857
org-type:       OTHER
address:        House of Francis, Room 303, Victoria, English River, Seychelles
abuse-c:        IVNO1-RIPE
mnt-ref:        IPV
mnt-by:         IPV
created:        2018-05-14T11:46:50Z
last-modified:  2026-05-13T05:23:58Z
source:         RIPE # Filtered

role:           IPV
address:        BZ
nic-hdl:        IVI24-RIPE
mnt-by:         IPV
created:        2018-05-16T13:28:41Z
last-modified:  2023-09-08T14:14:36Z
source:         RIPE # Filtered

% Information related to '89.248.172.0/24AS202425'

route:          89.248.172.0/24
origin:         AS202425
remarks:        +-----------------------------------------------
remarks:        | For abuse e-mail abuse@ipvolume.net
remarks:        | We do not always reply to abuse.
remarks:        | But we do take care your report is dealt with!
remarks:        +-----------------------------------------------
mnt-by:         IPV
created:        2019-02-08T15:47:32Z
last-modified:  2019-02-08T15:47:32Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.124.1 (ABERDEEN)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.248.172.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49030
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.248.172.11.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026090800 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 08 18:30:58 CST 2026
;; MSG SIZE  rcvd: 106
Host info
11.172.248.89.in-addr.arpa domain name pointer no-reverse-dns-configured.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
11.172.248.89.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
178.60.197.1 attackbots
SSH / Telnet Brute Force Attempts on Honeypot
2020-02-05 10:00:28
112.213.119.235 attackbots
Unauthorized connection attempt detected from IP address 112.213.119.235 to port 1433 [J]
2020-02-05 09:40:04
106.13.97.228 attack
Feb  5 00:07:49 cp sshd[18925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.97.228
2020-02-05 10:08:56
164.52.24.179 attackspambots
Unauthorized connection attempt detected from IP address 164.52.24.179 to port 1111 [J]
2020-02-05 10:02:57
112.85.42.178 attack
v+ssh-bruteforce
2020-02-05 09:40:47
178.151.152.84 attackspambots
Unauthorized connection attempt detected from IP address 178.151.152.84 to port 8080 [J]
2020-02-05 09:32:32
103.215.203.18 attackbotsspam
Unauthorized connection attempt detected from IP address 103.215.203.18 to port 8080 [J]
2020-02-05 09:42:57
49.51.49.117 attackspambots
Unauthorized connection attempt detected from IP address 49.51.49.117 to port 3312 [J]
2020-02-05 09:49:30
106.45.0.52 attack
Unauthorized connection attempt detected from IP address 106.45.0.52 to port 443 [J]
2020-02-05 09:42:09
196.52.43.119 attack
Unauthorized connection attempt detected from IP address 196.52.43.119 to port 443 [J]
2020-02-05 09:28:00
150.109.182.197 attackspambots
Unauthorized connection attempt detected from IP address 150.109.182.197 to port 6669 [J]
2020-02-05 09:34:26
123.30.146.218 attackbots
Unauthorized connection attempt detected from IP address 123.30.146.218 to port 1433 [J]
2020-02-05 10:05:10
95.158.36.20 attackbotsspam
Unauthorized connection attempt detected from IP address 95.158.36.20 to port 2323 [J]
2020-02-05 09:44:49
1.54.20.104 attackbots
Unauthorized connection attempt detected from IP address 1.54.20.104 to port 23 [J]
2020-02-05 09:52:49
106.45.1.141 attackspam
Unauthorized connection attempt detected from IP address 106.45.1.141 to port 80 [J]
2020-02-05 09:41:40

Recently Reported IPs

101.207.206.32 118.190.147.71 112.121.178.194 27.201.104.74
223.74.48.47 120.221.11.54 60.216.144.56 223.90.115.236
1.28.54.36 120.230.184.100 115.63.105.88 115.60.180.187
112.253.75.122 157.180.122.144 152.32.207.42 46.51.140.247
91.196.152.66 194.165.22.100 213.228.176.1 132.85.166.88