Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.248.172.16 attack
Bap IP
2024-05-12 23:39:04
89.248.172.140 attackbots
Automatic report - Port Scan
2020-10-13 20:36:52
89.248.172.140 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 2468 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 12:08:47
89.248.172.140 attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 7110 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 04:58:27
89.248.172.16 attack
ET DROP Dshield Block Listed Source group 1 - port: 60001 proto: tcp cat: Misc Attackbytes: 60
2020-10-11 03:06:34
89.248.172.16 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-10 18:56:46
89.248.172.16 attackbotsspam
- Port=2081
2020-10-08 03:13:38
89.248.172.16 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 8089 proto: tcp cat: Misc Attackbytes: 60
2020-10-07 19:27:51
89.248.172.85 attackbots
scans 5 times in preceeding hours on the ports (in chronological order) 28589 10777 30026 10201 30103 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 07:13:00
89.248.172.140 attack
scans 10 times in preceeding hours on the ports (in chronological order) 2728 4590 4446 3410 20222 1983 5656 6300 2728 3031 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 06:47:26
89.248.172.85 attack
 TCP (SYN) 89.248.172.85:50104 -> port 30009, len 44
2020-09-30 23:39:40
89.248.172.140 attackspam
 TCP (SYN) 89.248.172.140:44912 -> port 3410, len 44
2020-09-30 23:10:43
89.248.172.140 attack
firewall-block, port(s): 1983/tcp, 3450/tcp, 5656/tcp
2020-09-30 15:44:03
89.248.172.140 attackbots
 TCP (SYN) 89.248.172.140:47677 -> port 2000, len 44
2020-09-21 20:38:47
89.248.172.140 attackbots
ET DROP Dshield Block Listed Source group 1 - port: 5566 proto: tcp cat: Misc Attackbytes: 60
2020-09-21 12:30:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.248.172.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2895
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.248.172.148.			IN	A

;; AUTHORITY SECTION:
.			322	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091502 1800 900 604800 86400

;; Query time: 127 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 05:59:50 CST 2022
;; MSG SIZE  rcvd: 107
Host info
148.172.248.89.in-addr.arpa domain name pointer no-reverse-dns-configured.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.172.248.89.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
115.68.226.124 attackbots
Dec  9 14:21:23 jane sshd[10057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.68.226.124 
Dec  9 14:21:25 jane sshd[10057]: Failed password for invalid user gascon from 115.68.226.124 port 48778 ssh2
...
2019-12-09 21:24:39
193.112.125.195 attackbots
$f2bV_matches
2019-12-09 21:41:07
37.187.79.117 attack
2019-12-09T12:46:55.007194abusebot.cloudsearch.cf sshd\[4669\]: Invalid user cristiana from 37.187.79.117 port 50493
2019-12-09 21:18:46
103.243.107.92 attackspam
2019-12-09T09:17:56.417370centos sshd\[12871\]: Invalid user server from 103.243.107.92 port 50594
2019-12-09T09:17:56.423440centos sshd\[12871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.243.107.92
2019-12-09T09:17:58.239714centos sshd\[12871\]: Failed password for invalid user server from 103.243.107.92 port 50594 ssh2
2019-12-09 21:28:31
117.2.50.240 attackspambots
19/12/9@01:26:01: FAIL: Alarm-Intrusion address from=117.2.50.240
...
2019-12-09 21:36:14
68.183.219.43 attackspambots
Dec  9 10:47:06 server sshd\[31504\]: Invalid user http from 68.183.219.43
Dec  9 10:47:06 server sshd\[31504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.219.43 
Dec  9 10:47:08 server sshd\[31504\]: Failed password for invalid user http from 68.183.219.43 port 40262 ssh2
Dec  9 10:55:46 server sshd\[1526\]: Invalid user server from 68.183.219.43
Dec  9 10:55:46 server sshd\[1526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.219.43 
...
2019-12-09 21:54:52
84.135.61.56 attackbots
ssh failed login
2019-12-09 21:15:27
157.55.39.250 attack
Automatic report - Banned IP Access
2019-12-09 21:53:07
111.231.121.20 attackspambots
SSH invalid-user multiple login attempts
2019-12-09 21:25:02
170.231.56.223 attackspambots
Automatic report - Port Scan Attack
2019-12-09 21:21:42
76.95.50.101 attackspam
Fail2Ban Ban Triggered
2019-12-09 21:29:33
134.175.151.155 attackbots
Dec  9 09:29:21 lnxweb62 sshd[23688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.151.155
2019-12-09 21:24:19
206.189.201.72 attack
xmlrpc attack
2019-12-09 21:48:33
117.158.175.162 attackbotsspam
SSH-bruteforce attempts
2019-12-09 21:49:33
186.202.139.223 attackbotsspam
2019-12-09T10:44:53.012374  sshd[3816]: Invalid user estanqueiro from 186.202.139.223 port 59546
2019-12-09T10:44:53.026563  sshd[3816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.202.139.223
2019-12-09T10:44:53.012374  sshd[3816]: Invalid user estanqueiro from 186.202.139.223 port 59546
2019-12-09T10:44:54.712047  sshd[3816]: Failed password for invalid user estanqueiro from 186.202.139.223 port 59546 ssh2
2019-12-09T10:51:47.779995  sshd[4005]: Invalid user chia-yu from 186.202.139.223 port 41742
...
2019-12-09 21:11:33

Recently Reported IPs

89.248.172.150 89.248.172.193 89.248.172.176 89.248.172.157
92.118.37.1 185.62.189.232 181.174.164.245 181.174.164.106
181.174.165.95 190.14.39.174 181.174.164.41 89.248.171.213
45.141.84.227 168.1.128.41 92.118.160.75 167.94.145.196
185.61.138.225 89.248.172.151 45.148.10.249 5.182.39.3