Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.248.172.16 attack
Bap IP
2024-05-12 23:39:04
89.248.172.140 attackbots
Automatic report - Port Scan
2020-10-13 20:36:52
89.248.172.140 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 2468 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 12:08:47
89.248.172.140 attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 7110 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 04:58:27
89.248.172.16 attack
ET DROP Dshield Block Listed Source group 1 - port: 60001 proto: tcp cat: Misc Attackbytes: 60
2020-10-11 03:06:34
89.248.172.16 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-10 18:56:46
89.248.172.16 attackbotsspam
- Port=2081
2020-10-08 03:13:38
89.248.172.16 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 8089 proto: tcp cat: Misc Attackbytes: 60
2020-10-07 19:27:51
89.248.172.85 attackbots
scans 5 times in preceeding hours on the ports (in chronological order) 28589 10777 30026 10201 30103 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 07:13:00
89.248.172.140 attack
scans 10 times in preceeding hours on the ports (in chronological order) 2728 4590 4446 3410 20222 1983 5656 6300 2728 3031 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 06:47:26
89.248.172.85 attack
 TCP (SYN) 89.248.172.85:50104 -> port 30009, len 44
2020-09-30 23:39:40
89.248.172.140 attackspam
 TCP (SYN) 89.248.172.140:44912 -> port 3410, len 44
2020-09-30 23:10:43
89.248.172.140 attack
firewall-block, port(s): 1983/tcp, 3450/tcp, 5656/tcp
2020-09-30 15:44:03
89.248.172.140 attackbots
 TCP (SYN) 89.248.172.140:47677 -> port 2000, len 44
2020-09-21 20:38:47
89.248.172.140 attackbots
ET DROP Dshield Block Listed Source group 1 - port: 5566 proto: tcp cat: Misc Attackbytes: 60
2020-09-21 12:30:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.248.172.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14298
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.248.172.114.			IN	A

;; AUTHORITY SECTION:
.			165	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091600 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 17:33:04 CST 2022
;; MSG SIZE  rcvd: 107
Host info
114.172.248.89.in-addr.arpa domain name pointer no-reverse-dns-configured.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
114.172.248.89.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
1.192.131.153 attackspambots
Unauthorised access (Sep 16) SRC=1.192.131.153 LEN=44 TTL=241 ID=23025 TCP DPT=1433 WINDOW=1024 SYN
2020-09-17 06:00:24
189.127.188.175 attack
Automatic report - Port Scan
2020-09-17 05:29:23
221.226.58.102 attackspambots
Sep 16 20:02:06 sip sshd[1622959]: Invalid user america10 from 221.226.58.102 port 42970
Sep 16 20:02:08 sip sshd[1622959]: Failed password for invalid user america10 from 221.226.58.102 port 42970 ssh2
Sep 16 20:06:26 sip sshd[1622984]: Invalid user Asd@1234 from 221.226.58.102 port 52840
...
2020-09-17 06:00:52
112.133.236.92 attackspam
Auto Detect Rule!
proto TCP (SYN), 112.133.236.92:18143->gjan.info:23, len 44
2020-09-17 05:31:50
186.42.172.147 attackspambots
Unauthorized connection attempt from IP address 186.42.172.147 on Port 445(SMB)
2020-09-17 05:59:37
190.202.124.107 attack
Unauthorized connection attempt from IP address 190.202.124.107 on Port 445(SMB)
2020-09-17 05:36:58
113.252.218.83 attackbotsspam
Honeypot attack, port: 5555, PTR: 83-218-252-113-on-nets.com.
2020-09-17 06:08:06
14.231.248.86 attackbots
Unauthorized connection attempt from IP address 14.231.248.86 on Port 445(SMB)
2020-09-17 05:36:32
209.141.41.230 attack
Fail2Ban Ban Triggered
2020-09-17 06:03:20
183.60.227.177 attackbots
port
2020-09-17 05:30:14
88.136.99.40 attackspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-16T19:45:32Z and 2020-09-16T19:52:40Z
2020-09-17 05:42:09
171.25.193.20 attackbotsspam
$lgm
2020-09-17 05:41:13
156.202.217.55 attack
Honeypot attack, port: 445, PTR: host-156.202.55.217-static.tedata.net.
2020-09-17 05:38:56
27.6.149.231 attack
Auto Detect Rule!
proto TCP (SYN), 27.6.149.231:11525->gjan.info:23, len 40
2020-09-17 05:42:33
188.168.40.25 attack
Unauthorized connection attempt from IP address 188.168.40.25 on Port 445(SMB)
2020-09-17 05:58:12

Recently Reported IPs

185.10.68.159 185.62.190.130 92.118.37.38 185.62.190.243
89.248.174.192 188.209.52.59 188.209.52.71 92.118.37.181
93.174.89.110 167.94.145.137 188.209.52.38 93.174.93.177
92.118.37.59 92.118.161.59 188.209.52.143 155.107.17.219
89.248.174.194 92.118.37.100 89.248.174.233 185.173.35.207