This IP address has been reported a total of
15
times from
10 distinct
sources.
189.120.74.166 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Canada
with 4
reports;
United States of America
with 4
reports;
Netherlands
with 3
reports.
The most common categories in these recent reports were:
Port Scan
12
times;
Hacking
5
times;
Brute-Force
4
times;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 110 | Len: 52B | W ...
show morePort Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 110 | Len: 52B | Win: 65535(1) | rDNS: bd784aa6.virtua.com.br | F2B/ufw-honeypot@2026-10-28T10:16:11Z
show less
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 3 authentication events observed ...
show moreHoneypot Finding: credential brute-force against MSSQL on TCP/1433; 3 authentication events observed across 3 source port(s); target port(s): 1433.
show less
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 108 | Len: 52B | W ...
show morePort Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 108 | Len: 52B | Win: 65535(1) | rDNS: bd784aa6.virtua.com.br | F2B/ufw-honeypot@2026-10-27T19:09:49Z
show less
Unauthorized connection attempt detected from IP address 189.120.74.166 to port 1433 (web01.amsterda ...
show moreUnauthorized connection attempt detected from IP address 189.120.74.166 to port 1433 (web01.amsterdam)
show less
OpenCanary honeypot hit on port 1433 (no legitimate service runs there); logtype 9001. Automated rep ...
show moreOpenCanary honeypot hit on port 1433 (no legitimate service runs there); logtype 9001. Automated report.
show less
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 3 authentication events observed ...
show moreHoneypot Finding: credential brute-force against MSSQL on TCP/1433; 3 authentication events observed across 3 source port(s); target port(s): 1433.
show less
Network port/address scan: probed 1 distinct port(s) across 29 host(s); 100% of connections received ...
show moreNetwork port/address scan: probed 1 distinct port(s) across 29 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
show less
Network port/address scan: probed 1 distinct port(s) across 21 host(s); 100% of connections received ...
show moreNetwork port/address scan: probed 1 distinct port(s) across 21 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
show less
Network port/address scan: probed 1 distinct port(s) across 27 host(s); 100% of connections received ...
show moreNetwork port/address scan: probed 1 distinct port(s) across 27 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
show less
Network port/address scan: probed 1 distinct port(s) across 26 host(s); 100% of connections received ...
show moreNetwork port/address scan: probed 1 distinct port(s) across 26 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
show less
Port Scan
Showing 1 to
15
of 15 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
