Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Utrecht

Region: Utrecht

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.248.172.16 attack
Bap IP
2024-05-12 23:39:04
89.248.172.140 attackbots
Automatic report - Port Scan
2020-10-13 20:36:52
89.248.172.140 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 2468 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 12:08:47
89.248.172.140 attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 7110 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 04:58:27
89.248.172.16 attack
ET DROP Dshield Block Listed Source group 1 - port: 60001 proto: tcp cat: Misc Attackbytes: 60
2020-10-11 03:06:34
89.248.172.16 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-10 18:56:46
89.248.172.16 attackbotsspam
- Port=2081
2020-10-08 03:13:38
89.248.172.16 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 8089 proto: tcp cat: Misc Attackbytes: 60
2020-10-07 19:27:51
89.248.172.85 attackbots
scans 5 times in preceeding hours on the ports (in chronological order) 28589 10777 30026 10201 30103 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 07:13:00
89.248.172.140 attack
scans 10 times in preceeding hours on the ports (in chronological order) 2728 4590 4446 3410 20222 1983 5656 6300 2728 3031 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 06:47:26
89.248.172.85 attack
 TCP (SYN) 89.248.172.85:50104 -> port 30009, len 44
2020-09-30 23:39:40
89.248.172.140 attackspam
 TCP (SYN) 89.248.172.140:44912 -> port 3410, len 44
2020-09-30 23:10:43
89.248.172.140 attack
firewall-block, port(s): 1983/tcp, 3450/tcp, 5656/tcp
2020-09-30 15:44:03
89.248.172.140 attackbots
 TCP (SYN) 89.248.172.140:47677 -> port 2000, len 44
2020-09-21 20:38:47
89.248.172.140 attackbots
ET DROP Dshield Block Listed Source group 1 - port: 5566 proto: tcp cat: Misc Attackbytes: 60
2020-09-21 12:30:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.248.172.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53387
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.248.172.12.			IN	A

;; AUTHORITY SECTION:
.			389	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091400 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 14 17:54:51 CST 2022
;; MSG SIZE  rcvd: 106
Host info
12.172.248.89.in-addr.arpa domain name pointer liquidado.de.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.172.248.89.in-addr.arpa	name = liquidado.de.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
211.252.19.254 attack
2019-10-25T04:57:11.926924abusebot-5.cloudsearch.cf sshd\[31032\]: Invalid user bjorn from 211.252.19.254 port 33252
2019-10-25 14:19:45
211.217.183.95 attackbots
23/tcp 37215/tcp...
[2019-08-28/10-25]13pkt,2pt.(tcp)
2019-10-25 14:04:39
62.90.235.90 attackbots
Oct 25 04:47:00 venus sshd\[627\]: Invalid user appowner from 62.90.235.90 port 45907
Oct 25 04:47:00 venus sshd\[627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.90.235.90
Oct 25 04:47:01 venus sshd\[627\]: Failed password for invalid user appowner from 62.90.235.90 port 45907 ssh2
...
2019-10-25 14:22:55
222.186.180.41 attack
2019-10-25T06:24:03.019747abusebot.cloudsearch.cf sshd\[1920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41  user=root
2019-10-25 14:26:02
51.83.46.16 attack
Oct 24 18:07:37 hpm sshd\[27889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=16.ip-51-83-46.eu  user=root
Oct 24 18:07:39 hpm sshd\[27889\]: Failed password for root from 51.83.46.16 port 54948 ssh2
Oct 24 18:11:03 hpm sshd\[28291\]: Invalid user cfdtest from 51.83.46.16
Oct 24 18:11:03 hpm sshd\[28291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=16.ip-51-83-46.eu
Oct 24 18:11:05 hpm sshd\[28291\]: Failed password for invalid user cfdtest from 51.83.46.16 port 34404 ssh2
2019-10-25 14:23:18
3.88.8.190 attackspambots
404 NOT FOUND
2019-10-25 14:02:06
68.183.204.162 attack
2019-10-25T04:13:33.443547abusebot-8.cloudsearch.cf sshd\[639\]: Invalid user svn from 68.183.204.162 port 47874
2019-10-25 14:30:04
45.121.106.130 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/45.121.106.130/ 
 
 HK - 1H : (69)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : HK 
 NAME ASN : ASN24000 
 
 IP : 45.121.106.130 
 
 CIDR : 45.121.106.0/24 
 
 PREFIX COUNT : 92 
 
 UNIQUE IP COUNT : 56832 
 
 
 ATTACKS DETECTED ASN24000 :  
  1H - 2 
  3H - 4 
  6H - 8 
 12H - 12 
 24H - 12 
 
 DateTime : 2019-10-25 05:54:56 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2019-10-25 14:07:44
176.31.170.245 attackbotsspam
Oct 25 07:50:58 markkoudstaal sshd[4160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.170.245
Oct 25 07:50:59 markkoudstaal sshd[4160]: Failed password for invalid user cn from 176.31.170.245 port 45152 ssh2
Oct 25 07:54:46 markkoudstaal sshd[4532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.170.245
2019-10-25 13:55:01
118.97.194.110 attack
1433/tcp 445/tcp...
[2019-08-27/10-25]13pkt,2pt.(tcp)
2019-10-25 14:13:52
103.47.82.221 attack
2019-10-25T01:56:59.4603831495-001 sshd\[44110\]: Invalid user asdfghjkl from 103.47.82.221 port 51772
2019-10-25T01:56:59.4642241495-001 sshd\[44110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.82.221
2019-10-25T01:57:01.2616031495-001 sshd\[44110\]: Failed password for invalid user asdfghjkl from 103.47.82.221 port 51772 ssh2
2019-10-25T02:02:37.0171831495-001 sshd\[44411\]: Invalid user t00lk1t from 103.47.82.221 port 58982
2019-10-25T02:02:37.0205701495-001 sshd\[44411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.82.221
2019-10-25T02:02:38.8879061495-001 sshd\[44411\]: Failed password for invalid user t00lk1t from 103.47.82.221 port 58982 ssh2
...
2019-10-25 14:22:00
182.18.188.132 attackspam
Oct 25 01:59:05 firewall sshd[25932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.18.188.132
Oct 25 01:59:05 firewall sshd[25932]: Invalid user oracle from 182.18.188.132
Oct 25 01:59:07 firewall sshd[25932]: Failed password for invalid user oracle from 182.18.188.132 port 33324 ssh2
...
2019-10-25 13:54:33
182.72.178.114 attack
Oct 25 02:32:43 firewall sshd[26635]: Invalid user leonidas from 182.72.178.114
Oct 25 02:32:45 firewall sshd[26635]: Failed password for invalid user leonidas from 182.72.178.114 port 17279 ssh2
Oct 25 02:40:20 firewall sshd[26775]: Invalid user sz from 182.72.178.114
...
2019-10-25 14:06:46
104.245.145.5 attack
(From prater.tim86@gmail.com) Do you want to post your ad on thousands of advertising sites every month? Pay one low monthly fee and get virtually unlimited traffic to your site forever!To find out more check out our site here: http://postmoreads.net.n3t.store
2019-10-25 14:34:22
106.12.36.176 attackspam
Invalid user ethos from 106.12.36.176 port 54362
2019-10-25 13:54:11

Recently Reported IPs

190.14.39.82 45.148.10.212 5.182.39.38 89.248.171.106
185.62.189.124 41.79.198.34 45.148.10.215 45.148.10.139
167.94.145.131 45.148.10.110 185.61.138.120 185.62.189.190
112.78.165.179 223.26.169.175 185.61.138.123 176.32.34.183
176.32.34.216 208.52.157.122 5.182.39.120 185.61.138.240