Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.248.172.16 attack
Bap IP
2024-05-12 23:39:04
89.248.172.140 attackbots
Automatic report - Port Scan
2020-10-13 20:36:52
89.248.172.140 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 2468 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 12:08:47
89.248.172.140 attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 7110 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 04:58:27
89.248.172.16 attack
ET DROP Dshield Block Listed Source group 1 - port: 60001 proto: tcp cat: Misc Attackbytes: 60
2020-10-11 03:06:34
89.248.172.16 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-10 18:56:46
89.248.172.16 attackbotsspam
- Port=2081
2020-10-08 03:13:38
89.248.172.16 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 8089 proto: tcp cat: Misc Attackbytes: 60
2020-10-07 19:27:51
89.248.172.85 attackbots
scans 5 times in preceeding hours on the ports (in chronological order) 28589 10777 30026 10201 30103 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 07:13:00
89.248.172.140 attack
scans 10 times in preceeding hours on the ports (in chronological order) 2728 4590 4446 3410 20222 1983 5656 6300 2728 3031 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 06:47:26
89.248.172.85 attack
 TCP (SYN) 89.248.172.85:50104 -> port 30009, len 44
2020-09-30 23:39:40
89.248.172.140 attackspam
 TCP (SYN) 89.248.172.140:44912 -> port 3410, len 44
2020-09-30 23:10:43
89.248.172.140 attack
firewall-block, port(s): 1983/tcp, 3450/tcp, 5656/tcp
2020-09-30 15:44:03
89.248.172.140 attackbots
 TCP (SYN) 89.248.172.140:47677 -> port 2000, len 44
2020-09-21 20:38:47
89.248.172.140 attackbots
ET DROP Dshield Block Listed Source group 1 - port: 5566 proto: tcp cat: Misc Attackbytes: 60
2020-09-21 12:30:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.248.172.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33730
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.248.172.113.			IN	A

;; AUTHORITY SECTION:
.			363	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091600 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 20:57:17 CST 2022
;; MSG SIZE  rcvd: 107
Host info
113.172.248.89.in-addr.arpa domain name pointer no-reverse-dns-configured.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
113.172.248.89.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
45.143.223.178 attackbots
spam (f2b h2)
2020-06-12 01:15:58
222.247.176.156 attack
Port probing on unauthorized port 23
2020-06-12 01:52:55
31.156.121.141 attackbotsspam
Automatic report - Port Scan Attack
2020-06-12 01:54:42
159.65.216.161 attack
$f2bV_matches
2020-06-12 01:21:11
51.75.131.235 attack
Jun 11 19:37:10 OPSO sshd\[24382\]: Invalid user bakrimemnaa from 51.75.131.235 port 58040
Jun 11 19:37:10 OPSO sshd\[24382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.131.235
Jun 11 19:37:12 OPSO sshd\[24382\]: Failed password for invalid user bakrimemnaa from 51.75.131.235 port 58040 ssh2
Jun 11 19:37:46 OPSO sshd\[24450\]: Invalid user shipeng from 51.75.131.235 port 37902
Jun 11 19:37:46 OPSO sshd\[24450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.131.235
2020-06-12 01:45:38
122.152.213.85 attack
Jun 11 14:10:02 minden010 sshd[25005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.213.85
Jun 11 14:10:04 minden010 sshd[25005]: Failed password for invalid user admin from 122.152.213.85 port 48164 ssh2
Jun 11 14:11:26 minden010 sshd[26463]: Failed password for root from 122.152.213.85 port 33674 ssh2
...
2020-06-12 01:47:48
82.80.49.147 attack
Honeypot attack, port: 445, PTR: bzq-80-49-147.red.bezeqint.net.
2020-06-12 01:52:09
120.27.98.166 attackspam
Failed password for invalid user nxautomation from 120.27.98.166 port 40016 ssh2
2020-06-12 01:43:41
178.128.239.176 attack
Invalid user arasawa from 178.128.239.176 port 38514
2020-06-12 01:40:39
194.5.207.227 attack
Brute force SMTP login attempted.
...
2020-06-12 01:39:31
95.211.209.158 attackspambots
Looks for wordpress
2020-06-12 01:31:14
119.195.132.193 attackbotsspam
Unauthorized connection attempt detected from IP address 119.195.132.193 to port 81
2020-06-12 01:42:25
205.252.40.218 attack
Failed password for invalid user password from 205.252.40.218 port 57506 ssh2
2020-06-12 01:18:39
105.96.13.100 attack
1591877496 - 06/11/2020 14:11:36 Host: 105.96.13.100/105.96.13.100 Port: 445 TCP Blocked
2020-06-12 01:43:14
139.199.119.76 attack
Jun 11 14:44:29 vps639187 sshd\[23338\]: Invalid user admin from 139.199.119.76 port 49448
Jun 11 14:44:29 vps639187 sshd\[23338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.119.76
Jun 11 14:44:31 vps639187 sshd\[23338\]: Failed password for invalid user admin from 139.199.119.76 port 49448 ssh2
...
2020-06-12 01:21:45

Recently Reported IPs

89.248.172.47 188.209.52.21 45.132.184.143 212.57.42.81
45.140.206.231 89.248.172.57 185.173.35.28 45.140.207.118
154.201.39.214 154.201.43.202 117.18.13.69 200.106.124.35
186.24.9.118 154.194.10.185 154.201.45.5 185.88.100.235
154.201.45.23 84.54.56.249 5.133.123.109 45.148.127.83