Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.248.172.16 attack
Bap IP
2024-05-12 23:39:04
89.248.172.140 attackbots
Automatic report - Port Scan
2020-10-13 20:36:52
89.248.172.140 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 2468 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 12:08:47
89.248.172.140 attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 7110 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 04:58:27
89.248.172.16 attack
ET DROP Dshield Block Listed Source group 1 - port: 60001 proto: tcp cat: Misc Attackbytes: 60
2020-10-11 03:06:34
89.248.172.16 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-10 18:56:46
89.248.172.16 attackbotsspam
- Port=2081
2020-10-08 03:13:38
89.248.172.16 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 78 - port: 8089 proto: tcp cat: Misc Attackbytes: 60
2020-10-07 19:27:51
89.248.172.85 attackbots
scans 5 times in preceeding hours on the ports (in chronological order) 28589 10777 30026 10201 30103 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 07:13:00
89.248.172.140 attack
scans 10 times in preceeding hours on the ports (in chronological order) 2728 4590 4446 3410 20222 1983 5656 6300 2728 3031 resulting in total of 70 scans from 89.248.160.0-89.248.174.255 block.
2020-10-01 06:47:26
89.248.172.85 attack
 TCP (SYN) 89.248.172.85:50104 -> port 30009, len 44
2020-09-30 23:39:40
89.248.172.140 attackspam
 TCP (SYN) 89.248.172.140:44912 -> port 3410, len 44
2020-09-30 23:10:43
89.248.172.140 attack
firewall-block, port(s): 1983/tcp, 3450/tcp, 5656/tcp
2020-09-30 15:44:03
89.248.172.140 attackbots
 TCP (SYN) 89.248.172.140:47677 -> port 2000, len 44
2020-09-21 20:38:47
89.248.172.140 attackbots
ET DROP Dshield Block Listed Source group 1 - port: 5566 proto: tcp cat: Misc Attackbytes: 60
2020-09-21 12:30:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.248.172.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37445
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.248.172.8.			IN	A

;; AUTHORITY SECTION:
.			587	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022100700 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 07 19:41:59 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 8.172.248.89.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 8.172.248.89.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
179.108.245.146 attackspam
SMTP-sasl brute force
...
2019-06-29 09:55:14
189.110.60.233 attackbots
firewall-block, port(s): 23/tcp
2019-06-29 10:14:09
80.82.77.139 attackbots
23/tcp 8060/tcp 3460/tcp...
[2019-04-28/06-28]1798pkt,269pt.(tcp),48pt.(udp)
2019-06-29 10:35:17
106.75.126.42 attackbotsspam
Repeated brute force against a port
2019-06-29 10:02:58
43.246.174.77 attackbotsspam
$f2bV_matches
2019-06-29 10:13:21
37.99.132.139 attack
firewall-block, port(s): 445/tcp
2019-06-29 10:37:45
95.152.63.246 attack
[portscan] Port scan
2019-06-29 10:15:19
124.41.211.27 attack
Jun 29 01:42:35 localhost sshd\[70896\]: Invalid user hg from 124.41.211.27 port 40264
Jun 29 01:42:35 localhost sshd\[70896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.41.211.27
Jun 29 01:42:37 localhost sshd\[70896\]: Failed password for invalid user hg from 124.41.211.27 port 40264 ssh2
Jun 29 01:45:17 localhost sshd\[70979\]: Invalid user nue from 124.41.211.27 port 57412
Jun 29 01:45:17 localhost sshd\[70979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.41.211.27
...
2019-06-29 10:01:03
217.107.65.7 attackbotsspam
[portscan] Port scan
2019-06-29 10:08:57
210.21.9.251 attackbots
Port Scan 3389
2019-06-29 10:06:26
107.170.194.180 attackbotsspam
Port scan: Attack repeated for 24 hours
2019-06-29 10:18:59
61.219.107.208 attack
SMB Server BruteForce Attack
2019-06-29 10:25:40
177.154.230.205 attack
Distributed brute force attack
2019-06-29 09:58:40
193.169.252.18 attackspam
Jun 29 02:05:29 mail postfix/smtpd\[31435\]: warning: unknown\[193.169.252.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 29 02:19:56 mail postfix/smtpd\[31662\]: warning: unknown\[193.169.252.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 29 03:03:36 mail postfix/smtpd\[32317\]: warning: unknown\[193.169.252.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 29 03:18:07 mail postfix/smtpd\[32570\]: warning: unknown\[193.169.252.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2019-06-29 10:08:21
191.53.195.243 attackbots
Excessive failed login attempts on port 587
2019-06-29 10:36:53

Recently Reported IPs

5.182.39.109 89.248.174.86 23.94.98.131 189.85.102.254
103.129.247.213 139.59.228.23 200.124.71.90 45.148.10.235
202.107.14.80 113.4.47.130 185.62.189.144 1.70.185.151
20.163.90.129 110.183.53.50 147.182.154.213 20.239.71.199
195.154.231.57 39.116.199.43 128.90.102.11 78.158.21.229