51.89.173.238

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
48 reports
37 reporters · latest 1 hour ago
ISP
OVH Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16276
Hostname(s)
ns3154860.ip-51-89-173.eu
Domain Name
ovh.net
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
Barking, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
48 from 37 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 16 🇫🇷 France 11 🇩🇪 Germany 6
Most common categories Port Scan 47 Hacking 7 Brute-Force 4 Web App Attack 3 SSH 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇵 radheykrishna.com.np
Nov 15 23:02:15 kernel: [3668276.912224] [UFW BLOCK] IN=ens160 OUT= SRC=51.89.173.238 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=1933 PROTO=TCP SPT=43000 DPT=27017 WINDOW=1024 RES=0x00 SYN URGP=0 ...
Port Scan
🇹🇷 Threat.live
Port Scan Detected
Port Scan
🇨🇭 ardoshipsquad
Port scan blocked by firewall: TCP 22 (1 packet) within 24h.
Port Scan SSH
🇨🇭 dirtronin
Honeypot connection to elastic decoy port — banner-match: . Source: HyveHeim/HyveGuard tripwire (auto-report).
Port Scan Hacking Exploited Host
🇷🇺 Panamaaa
Port scan detected; Brute-force attack detected
Port Scan Brute-Force
🇩🇪 David Ferneding
Blocked by UFW (TCP on 6379) Source port: 41673 TTL: 244 Packet length: 40 TOS: 0x00 This report (for 51.89.173.238) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 london2038.com
Port Scan
🇰🇷 ian ian
Unsolicited TCP SYN to closed port(s) 1433 (1 attempt(s)) on a host that serves no such service; first seen 2026-11-15T15:51:44Z UTC, blocked by firewall.
Port Scan Hacking
🇺🇸 avgsmoe
Connection to a honeypot port. Automated report (firemon).
Port Scan
🇦🇺 FEWA
Fail2Ban Ban Triggered
Hacking Brute-Force
🇺🇸 shaunc
Port Scan
🇳🇮 elfita
Blocked by nftables on AmneziaWG gateway (Ports: 22)
Port Scan Brute-Force Exploited Host
🇫🇷 WebServ
Fail2Ban jail [portscan-block]: banned after 5 failed attempt(s). Unauthorized port scan
Port Scan
🇫🇷 uthul
T-Pot honeypot: 14 hits on ports [80, 443, 2375, 2376, 9000, 9443] (automated)
Port Scan Web App Attack
🇺🇸 LotPhantom
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.89.100
🇺🇸 165.22.190.245
🇺🇸 159.89.236.124
🇸🇬 104.164.168.213
🇺🇸 70.169.11.214
🇳🇬 152.32.140.22
🇩🇪 94.134.97.69
🇷🇴 80.94.95.116
🇨🇦 45.198.224.31
🇳🇱 45.148.10.151
🇺🇸 34.181.181.10
🇬🇧 34.89.81.40
🇨🇳 27.24.141.169
🇧🇷 200.195.113.167
🇧🇷 178.95.44.252
🇿🇦 165.165.122.25
🇬🇦 154.0.184.39
🇧🇷 151.247.145.192
🇧🇷 151.247.145.165
🇩🇪 151.243.11.33
feedback