Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Utrecht

Region: Utrecht

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.248.172.16 attack
Bap IP
2024-05-12 23:39:04
89.248.172.140 attackbots
Automatic report - Port Scan
2020-10-13 20:36:52
89.248.172.140 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 2468 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 12:08:47
89.248.172.140 attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 7110 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 04:58:27
89.248.172.16 attack
ET DROP Dshield Block Listed Source group 1 - port: 60001 proto: tcp cat: Misc Attackbytes: 60
2020-10-11 03:06:34
89.248.172.16 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-10 18:56:46
89.248.172.16 attackbotsspam
- Port=2081
2020-10-08 03:13:38
89.248.172.16 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 8089 proto: tcp cat: Misc Attackbytes: 60
2020-10-07 19:27:51
89.248.172.85 attackbots
scans 5 times in preceeding hours on the ports (in chronological order) 28589 10777 30026 10201 30103 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 07:13:00
89.248.172.140 attack
scans 10 times in preceeding hours on the ports (in chronological order) 2728 4590 4446 3410 20222 1983 5656 6300 2728 3031 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 06:47:26
89.248.172.85 attack
 TCP (SYN) 89.248.172.85:50104 -> port 30009, len 44
2020-09-30 23:39:40
89.248.172.140 attackspam
 TCP (SYN) 89.248.172.140:44912 -> port 3410, len 44
2020-09-30 23:10:43
89.248.172.140 attack
firewall-block, port(s): 1983/tcp, 3450/tcp, 5656/tcp
2020-09-30 15:44:03
89.248.172.140 attackbots
 TCP (SYN) 89.248.172.140:47677 -> port 2000, len 44
2020-09-21 20:38:47
89.248.172.140 attackbots
ET DROP Dshield Block Listed Source group 1 - port: 5566 proto: tcp cat: Misc Attackbytes: 60
2020-09-21 12:30:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.248.172.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20711
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.248.172.4.			IN	A

;; AUTHORITY SECTION:
.			595	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022100602 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 07 08:35:05 CST 2022
;; MSG SIZE  rcvd: 105
Host info
4.172.248.89.in-addr.arpa domain name pointer no-reverse-dns-configured.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
4.172.248.89.in-addr.arpa	name = no-reverse-dns-configured.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
111.229.216.155 attackspambots
Invalid user pru from 111.229.216.155 port 38434
2020-05-23 15:22:43
117.200.228.84 attackspambots
Invalid user administrator from 117.200.228.84 port 57383
2020-05-23 15:17:21
179.124.34.9 attackbots
Invalid user agn from 179.124.34.9 port 55754
2020-05-23 14:53:06
120.237.123.242 attackspambots
Invalid user wre from 120.237.123.242 port 12745
2020-05-23 15:12:58
211.94.143.34 attackspam
Invalid user mhy from 211.94.143.34 port 54124
2020-05-23 14:44:48
139.215.217.181 attack
Invalid user egh from 139.215.217.181 port 41256
2020-05-23 15:01:46
190.187.87.75 attackspambots
Invalid user mxs from 190.187.87.75 port 57828
2020-05-23 14:49:14
200.8.217.15 attackbots
Invalid user r00t from 200.8.217.15 port 54525
2020-05-23 14:45:49
175.170.116.53 attackbotsspam
Invalid user ubnt from 175.170.116.53 port 63605
2020-05-23 14:54:55
213.137.179.203 attackspam
May 23 07:38:37  sshd\[30564\]: Invalid user gcu from 213.137.179.203May 23 07:38:39  sshd\[30564\]: Failed password for invalid user gcu from 213.137.179.203 port 7551 ssh2
...
2020-05-23 14:43:20
123.136.153.64 attackspambots
Invalid user pi from 123.136.153.64 port 53250
2020-05-23 15:10:09
168.121.104.93 attack
Invalid user eka from 168.121.104.93 port 38176
2020-05-23 14:57:36
210.112.232.6 attackbotsspam
May 18 09:28:43 cumulus sshd[9199]: Invalid user fcc from 210.112.232.6 port 49091
May 18 09:28:43 cumulus sshd[9199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.112.232.6
May 18 09:28:45 cumulus sshd[9199]: Failed password for invalid user fcc from 210.112.232.6 port 49091 ssh2
May 18 09:28:45 cumulus sshd[9199]: Received disconnect from 210.112.232.6 port 49091:11: Bye Bye [preauth]
May 18 09:28:45 cumulus sshd[9199]: Disconnected from 210.112.232.6 port 49091 [preauth]
May 18 09:50:38 cumulus sshd[11573]: Invalid user jgz from 210.112.232.6 port 46676
May 18 09:50:38 cumulus sshd[11573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.112.232.6
May 18 09:50:39 cumulus sshd[11573]: Failed password for invalid user jgz from 210.112.232.6 port 46676 ssh2
May 18 09:50:40 cumulus sshd[11573]: Received disconnect from 210.112.232.6 port 46676:11: Bye Bye [preauth]
May 18 09:50:40 c........
-------------------------------
2020-05-23 14:45:04
125.27.62.28 attack
Invalid user ubnt from 125.27.62.28 port 55260
2020-05-23 15:06:37
3.15.255.77 attackbotsspam
Invalid user ahb from 3.15.255.77 port 38692
2020-05-23 14:41:01

Recently Reported IPs

107.152.177.61 89.248.171.249 92.118.160.130 93.174.89.118
89.248.174.69 5.182.39.81 190.14.39.48 167.94.138.230
181.174.164.86 176.121.14.0 176.32.34.125 5.182.39.22
50.16.104.72 50.236.24.180 51.12.242.87 187.227.205.189
186.96.44.126 124.222.119.221 50.21.176.173 54.152.84.211