Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Ukraine

Internet Service Provider: Freenet Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
spam
2020-01-28 13:22:49
attack
Aug 20 08:49:00 mail postfix/postscreen[93963]: PREGREET 34 after 0.48 from [89.252.19.66]:39188: EHLO 89.252.19.66.freenet.com.ua

...
2019-08-21 04:43:02
Comments on same subnet:
IP Type Details Datetime
89.252.196.99 attackbots
Jun  9 07:45:54 debian kernel: [580510.774191] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=89.252.196.99 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=35777 DF PROTO=TCP SPT=13915 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0
2020-06-09 13:52:03
89.252.191.174 attack
Jun  9 02:25:20 debian kernel: [561277.784664] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=89.252.191.174 DST=89.252.131.35 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=24749 DF PROTO=TCP SPT=51812 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0
2020-06-09 07:50:04
89.252.196.99 attack
Jun  9 01:57:59 debian kernel: [559636.018251] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=89.252.196.99 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=39723 DF PROTO=TCP SPT=61468 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0
2020-06-09 07:06:09
89.252.196.99 attackbotsspam
Jun  7 18:21:07 debian kernel: [445826.366546] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=89.252.196.99 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=62640 DF PROTO=TCP SPT=50371 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0
2020-06-07 23:24:33
89.252.196.99 attackbots
Jun  5 13:13:54 debian kernel: [254596.618880] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=89.252.196.99 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=12096 DF PROTO=TCP SPT=39034 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0
2020-06-05 18:14:39
89.252.191.174 attackbots
Unauthorized connection attempt from IP address 89.252.191.174 on Port 445(SMB)
2020-05-31 05:21:54
89.252.191.109 attack
Repeated RDP login failures. Last user: Admin
2020-04-02 13:57:00
89.252.191.109 attackspam
Repeated RDP login failures. Last user: 1
2020-03-31 19:56:43
89.252.191.212 attackspambots
Portscan or hack attempt detected by psad/fwsnort
2019-12-15 21:40:06
89.252.191.61 attackspam
[portscan] tcp/22 [SSH]
in blocklist.de:'listed [asterisk]'
in sorbs:'listed [spam]'
*(RWIN=65535)(10151156)
2019-10-16 03:37:25
89.252.191.61 attack
Oct  8 05:16:03 netserv300 sshd[21674]: Connection from 89.252.191.61 port 55664 on 178.63.236.21 port 22
Oct  8 05:16:03 netserv300 sshd[21675]: Connection from 89.252.191.61 port 51972 on 178.63.236.16 port 22
Oct  8 05:16:03 netserv300 sshd[21676]: Connection from 89.252.191.61 port 45132 on 178.63.236.18 port 22
Oct  8 05:16:03 netserv300 sshd[21677]: Connection from 89.252.191.61 port 50022 on 178.63.236.19 port 22
Oct  8 05:16:03 netserv300 sshd[21678]: Connection from 89.252.191.61 port 60436 on 178.63.236.17 port 22
Oct  8 05:16:03 netserv300 sshd[21679]: Connection from 89.252.191.61 port 42988 on 178.63.236.20 port 22
Oct  8 05:16:03 netserv300 sshd[21680]: Connection from 89.252.191.61 port 60376 on 178.63.236.22 port 22
Oct  8 05:19:02 netserv300 sshd[21689]: Connection from 89.252.191.61 port 48686 on 178.63.236.17 port 22
Oct  8 05:19:18 netserv300 sshd[21691]: Connection from 89.252.191.61 port 55872 on 178.63.236.18 port 22
Oct  8 05:19:19 netserv300 sshd........
------------------------------
2019-10-14 03:28:33
89.252.191.61 attackspam
The IP address [89.252.191.61] experienced 5 failed attempts when attempting to log into SSH
2019-10-13 13:10:12
89.252.191.61 attackspambots
Oct  8 05:16:03 netserv300 sshd[21674]: Connection from 89.252.191.61 port 55664 on 178.63.236.21 port 22
Oct  8 05:16:03 netserv300 sshd[21675]: Connection from 89.252.191.61 port 51972 on 178.63.236.16 port 22
Oct  8 05:16:03 netserv300 sshd[21676]: Connection from 89.252.191.61 port 45132 on 178.63.236.18 port 22
Oct  8 05:16:03 netserv300 sshd[21677]: Connection from 89.252.191.61 port 50022 on 178.63.236.19 port 22
Oct  8 05:16:03 netserv300 sshd[21678]: Connection from 89.252.191.61 port 60436 on 178.63.236.17 port 22
Oct  8 05:16:03 netserv300 sshd[21679]: Connection from 89.252.191.61 port 42988 on 178.63.236.20 port 22
Oct  8 05:16:03 netserv300 sshd[21680]: Connection from 89.252.191.61 port 60376 on 178.63.236.22 port 22
Oct  8 05:19:02 netserv300 sshd[21689]: Connection from 89.252.191.61 port 48686 on 178.63.236.17 port 22
Oct  8 05:19:18 netserv300 sshd[21691]: Connection from 89.252.191.61 port 55872 on 178.63.236.18 port 22
Oct  8 05:19:19 netserv300 sshd........
------------------------------
2019-10-13 02:22:07
89.252.191.61 attack
22/tcp
[2019-10-08]1pkt
2019-10-08 23:29:38
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.252.19.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52476
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;89.252.19.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082001 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 21 04:42:57 CST 2019
;; MSG SIZE  rcvd: 116
Host info
66.19.252.89.in-addr.arpa domain name pointer 89.252.19.66.freenet.com.ua.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
66.19.252.89.in-addr.arpa	name = 89.252.19.66.freenet.com.ua.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
178.49.253.146 attackspambots
23/tcp 5555/tcp
[2019-08-01/12]2pkt
2019-08-13 05:25:53
185.184.24.242 attackspam
Brute force attempt
2019-08-13 05:53:42
185.211.245.170 attackspambots
Aug 12 23:37:21 relay postfix/smtpd\[25565\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 12 23:37:39 relay postfix/smtpd\[14722\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 12 23:48:06 relay postfix/smtpd\[14722\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 12 23:48:21 relay postfix/smtpd\[19393\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 12 23:51:52 relay postfix/smtpd\[15358\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-08-13 05:58:38
109.241.115.20 attack
5555/tcp 5555/tcp
[2019-07-27/08-12]2pkt
2019-08-13 05:18:24
123.125.71.39 attackbots
Automatic report - Banned IP Access
2019-08-13 05:53:20
61.76.169.138 attackbots
v+ssh-bruteforce
2019-08-13 05:13:51
160.153.155.29 attack
fail2ban honeypot
2019-08-13 05:33:14
23.88.143.159 attackspam
Registration form abuse
2019-08-13 05:46:05
120.92.173.154 attack
Aug 12 19:19:47 debian sshd\[10802\]: Invalid user rool from 120.92.173.154 port 42459
Aug 12 19:19:47 debian sshd\[10802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.173.154
...
2019-08-13 05:15:08
78.187.73.47 attack
Telnet Server BruteForce Attack
2019-08-13 05:26:29
109.94.119.192 attackspambots
23/tcp 8080/tcp
[2019-07-21/08-12]2pkt
2019-08-13 05:22:15
157.230.42.76 attackbots
2019-08-12T20:53:01.474622stark.klein-stark.info sshd\[15672\]: Invalid user admin1 from 157.230.42.76 port 48644
2019-08-12T20:53:01.478896stark.klein-stark.info sshd\[15672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.42.76
2019-08-12T20:53:03.838264stark.klein-stark.info sshd\[15672\]: Failed password for invalid user admin1 from 157.230.42.76 port 48644 ssh2
...
2019-08-13 05:20:15
185.220.101.15 attackbotsspam
Aug 13 00:32:07 master sshd[14776]: Failed password for root from 185.220.101.15 port 44702 ssh2
Aug 13 00:32:10 master sshd[14776]: Failed password for root from 185.220.101.15 port 44702 ssh2
Aug 13 00:32:12 master sshd[14776]: Failed password for root from 185.220.101.15 port 44702 ssh2
Aug 13 00:33:52 master sshd[14964]: Failed password for root from 185.220.101.15 port 44853 ssh2
Aug 13 00:33:55 master sshd[14964]: Failed password for root from 185.220.101.15 port 44853 ssh2
Aug 13 00:33:57 master sshd[14964]: Failed password for root from 185.220.101.15 port 44853 ssh2
2019-08-13 05:41:52
203.155.158.154 attackbots
Aug 13 00:40:03 www4 sshd\[1929\]: Invalid user test from 203.155.158.154
Aug 13 00:40:03 www4 sshd\[1929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.155.158.154
Aug 13 00:40:05 www4 sshd\[1929\]: Failed password for invalid user test from 203.155.158.154 port 49568 ssh2
...
2019-08-13 05:44:41
114.92.199.194 attackbots
Honeypot attack, port: 23, PTR: PTR record not found
2019-08-13 05:17:55

Recently Reported IPs

104.234.56.101 30.5.8.111 172.231.216.6 201.53.237.177
14.232.67.51 139.170.149.161 185.19.1.212 107.96.141.40
80.14.171.68 183.114.253.80 173.253.98.123 10.214.186.163
48.137.132.224 73.148.11.28 11.129.63.9 148.169.104.65
210.212.107.47 209.48.201.9 108.181.53.175 92.48.244.95