AbuseIPDB » 191.85.18.89
191.85.18.89
This IP was reported 9 times. Confidence of
Abuse
is 29% : ?
ISP
Telefonica de Argentina
Usage Type
Fixed Line ISP
ASN
AS22927
Domain Name
telefonica.com.ar
Country
🇦🇷
Argentina
City
Lomas de Zamora, Buenos Aires
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 191.85.18.89 :
This IP address has been reported a total of
9
times from
9 distinct
sources.
191.85.18.89 was first reported on
September 11th 2026 , and the most recent report was
11 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇹
CoreTech srl
2026-10-23 00:50:31
(11 hours ago)
cloudlinux2 fail2ban: 2026-10-23 02:44:23,036 fail2ban.filter [1488]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-10-23 02:44:23,036 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 45.146.55.50 - 2026-10-23 02:44:22cloudlinux2 fail2ban: 2026-10-23 02:44:38,794 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 142.111.152.137 - 2026-10-23 02:44:38cloudlinux2 fail2ban: 2026-10-23 02:44:46,155 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 89.245.31.249 - 2026-10-23 02:44:46cloudlinux2 fail2ban: 2026-10-23 02:45:02,671 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 191.85.18.89 - 2026-10-23 02:45:02cloudlinux2 fail2ban: 2026-10-23 02:45:01,043 fail2ban.actions [1488]: NOTICE [plesk-modsecurity] Unban 34.52.187.36cloudlinux2 fail2ban: 2026-10-23 02:44:55,599 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 45.132.227.176 - 2026-10-23 02:44:54cloudlinux2 fail2ban: 2026-10-23 02:44:55,593 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 185.251.19.52 - 2026-10-23 02:44:54cloudlinux2 fail2ban: 2026-
show less
Web App Attack
🇹🇭
Sawasdee
2026-09-13 01:11:47
(1 month ago)
SSH break in attempt
...
SSH
🇹🇷
savasboluk
2026-09-13 00:04:56
(1 month ago)
Seczar SecureOps — SSH Brute Force (6 events) — quarantined 43200m on ABB-GATE
SSH
Brute-Force
🇩🇪
Tsumugi Kotobuki
2026-09-12 22:59:34
(1 month ago)
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 48 | Len: 60B | Win: 6 ...
show more
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 48 | Len: 60B | Win: 65535(1) | F2B/ufw-honeypot@2026-09-12T22:59:34Z
show less
Port Scan
Hacking
🇺🇸
sandra361
2026-09-12 18:31:49
(1 month ago)
Brute-force detected: 6 attempts across 1 port (22). | Evidence: GHOST_SCAN: IN=enp1s0 SRC=191.85.18 ...
show more
Brute-force detected: 6 attempts across 1 port (22). | Evidence: GHOST_SCAN: IN=enp1s0 SRC=191.85.18.89 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=45911 DF PROTO=TCP SPT=47340 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0
show less
Brute-Force
🇺🇸
MPL
2026-09-12 13:22:31
(1 month ago)
tcp ports: 22,23 (14 or more attempts)
Port Scan
🇺🇸
cybsecaoccol
2026-09-12 08:04:33
(1 month ago)
unauthorized connection or malicious port scan attempted on tcp port - corp
Port Scan
Hacking
2026-09-12 03:33:00
(1 month ago)
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
Port Scan
2026-09-11 02:59:04
(1 month ago)
denied SSH access attempt. destination port 22.
Port Scan
Brute-Force
SSH
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: