Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Utrecht

Region: Utrecht

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.248.172.16 attack
Bap IP
2024-05-12 23:39:04
89.248.172.140 attackbots
Automatic report - Port Scan
2020-10-13 20:36:52
89.248.172.140 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 2468 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 12:08:47
89.248.172.140 attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 7110 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 04:58:27
89.248.172.16 attack
ET DROP Dshield Block Listed Source group 1 - port: 60001 proto: tcp cat: Misc Attackbytes: 60
2020-10-11 03:06:34
89.248.172.16 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-10 18:56:46
89.248.172.16 attackbotsspam
- Port=2081
2020-10-08 03:13:38
89.248.172.16 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 8089 proto: tcp cat: Misc Attackbytes: 60
2020-10-07 19:27:51
89.248.172.85 attackbots
scans 5 times in preceeding hours on the ports (in chronological order) 28589 10777 30026 10201 30103 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 07:13:00
89.248.172.140 attack
scans 10 times in preceeding hours on the ports (in chronological order) 2728 4590 4446 3410 20222 1983 5656 6300 2728 3031 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 06:47:26
89.248.172.85 attack
 TCP (SYN) 89.248.172.85:50104 -> port 30009, len 44
2020-09-30 23:39:40
89.248.172.140 attackspam
 TCP (SYN) 89.248.172.140:44912 -> port 3410, len 44
2020-09-30 23:10:43
89.248.172.140 attack
firewall-block, port(s): 1983/tcp, 3450/tcp, 5656/tcp
2020-09-30 15:44:03
89.248.172.140 attackbots
 TCP (SYN) 89.248.172.140:47677 -> port 2000, len 44
2020-09-21 20:38:47
89.248.172.140 attackbots
ET DROP Dshield Block Listed Source group 1 - port: 5566 proto: tcp cat: Misc Attackbytes: 60
2020-09-21 12:30:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.248.172.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13152
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.248.172.218.			IN	A

;; AUTHORITY SECTION:
.			429	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091502 1800 900 604800 86400

;; Query time: 77 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 10:36:12 CST 2022
;; MSG SIZE  rcvd: 107
Host info
218.172.248.89.in-addr.arpa domain name pointer no-reverse-dns-configured.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
218.172.248.89.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
182.139.65.46 attackspam
Unauthorized connection attempt from IP address 182.139.65.46 on Port 445(SMB)
2019-08-12 18:59:37
189.84.211.2 attack
Aug 12 10:29:17 herz-der-gamer sshd[11305]: Invalid user openproject from 189.84.211.2 port 17490
...
2019-08-12 19:20:01
219.223.236.125 attackspambots
Aug 12 06:00:54 lnxweb61 sshd[17277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.223.236.125
2019-08-12 19:11:44
5.9.98.234 attack
20 attempts against mh-misbehave-ban on ice.magehost.pro
2019-08-12 18:44:56
35.233.73.93 attackbotsspam
" "
2019-08-12 18:44:20
78.194.214.19 attackbots
Aug 12 12:45:26 v22018076622670303 sshd\[25527\]: Invalid user stevey from 78.194.214.19 port 56158
Aug 12 12:45:26 v22018076622670303 sshd\[25527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.194.214.19
Aug 12 12:45:28 v22018076622670303 sshd\[25527\]: Failed password for invalid user stevey from 78.194.214.19 port 56158 ssh2
...
2019-08-12 19:20:47
123.19.181.65 attack
Aug 12 04:29:08 [munged] sshd[7221]: Invalid user noc from 123.19.181.65 port 50762
Aug 12 04:29:10 [munged] sshd[7221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.19.181.65
2019-08-12 19:18:34
5.45.67.104 attackspam
SYN Flood , 2019-08-12 11:55:25 Syn Flood apache for [5.45.67.104] -
2019-08-12 18:43:31
145.239.198.218 attackbotsspam
Repeated brute force against a port
2019-08-12 19:14:10
196.179.234.98 attackspambots
Automatic report - Banned IP Access
2019-08-12 19:26:29
93.119.179.99 attackspambots
Aug 12 04:24:02 km20725 sshd\[5962\]: Invalid user kobis from 93.119.179.99Aug 12 04:24:04 km20725 sshd\[5962\]: Failed password for invalid user kobis from 93.119.179.99 port 56052 ssh2Aug 12 04:29:21 km20725 sshd\[6179\]: Invalid user anni from 93.119.179.99Aug 12 04:29:22 km20725 sshd\[6179\]: Failed password for invalid user anni from 93.119.179.99 port 33092 ssh2
...
2019-08-12 19:15:58
93.158.217.209 attack
SYN Flood , 2019-08-12 11:39:44 Syn Flood apache for [93.158.217.209] -
2019-08-12 11:42:44 Syn Flood apache for [93.158.217.209] -
2019-08-12 11:46:07 Syn Flood apache for [93.158.217.209] -
2019-08-12 19:21:41
51.38.150.105 attackspambots
Aug 12 08:39:30 thevastnessof sshd[30530]: Failed password for root from 51.38.150.105 port 42354 ssh2
...
2019-08-12 18:57:54
202.62.98.67 attackspam
Unauthorized connection attempt from IP address 202.62.98.67 on Port 445(SMB)
2019-08-12 18:42:30
178.21.17.172 attackspambots
CloudCIX Reconnaissance Scan Detected, PTR: hosted.by.gethost.nl.
2019-08-12 18:53:15

Recently Reported IPs

92.118.161.163 185.62.189.205 185.173.35.80 45.148.10.225
185.62.189.125 162.142.125.126 5.182.39.188 167.94.146.252
93.174.93.9 89.248.168.43 167.94.146.135 93.174.89.218
89.248.172.74 93.174.93.1 89.248.168.120 85.62.188.198
176.121.14.9 176.121.14.44 45.138.103.130 92.118.161.215