89.104.74.76
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Domain names registrar REG.RU, Ltd
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS197695
- Hostname(s)
- 89-104-74-76.cloudvps.regruhosting.ru
- Domain Name
- reg.ru
- Country
- 🇷🇺 Russian Federation
- City
- Moscow, Moscow
No reports in the last 60 days
89.104.74.76 has been reported 48 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
48 from
29 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=92, sources=1)
|
Hacking Brute-Force SSH | |
| 🇺🇸 RAP |
2026-04-13 14:49:40 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan Web App Attack | |
| 🇺🇸 MPL |
tcp/8317 (4 or more attempts)
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 8317)
Source port: 56560
TTL: 41
Packet length: 60
TOS: 0x00
This report (for 89.104.74.76) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8317 (8 or more attempts)
|
Port Scan | |
| 🇺🇸 thororen |
Blocked by UFW [8317/tcp]
Source port: 51624
TTL: 48
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇮 6kilowatti |
|
Port Scan | |
| 🇫🇮 kumiko |
[2026-04-11 18:47:43] Unauthorized port scan/probing (port 8317) Blocked by UFW
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 8317
GET /
User-Agent: Python/3.12 aiohttp/3.13.3
Accept: */*
Accept-Encoding: gzip, deflate; 8317 [2] TCP
|
Web App Attack | |
| 🇩🇪 arc21 |
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8317 (8 or more attempts)
|
Port Scan | |
| 🇧🇷 diego |
[rede-arem1] 04/10/2026-23:29:10.332822, 89.104.74.76, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 137
|
Hacking | |
| 🇺🇸 MPL |
tcp/8317 (12 or more attempts)
|
Port Scan | |
| 🇺🇸 etu brutus |
89.104.74.76 Blocked by [Attack Vector List]
...
|
Hacking Brute-Force Exploited Host | |
| 🇺🇸 MPL |
tcp/8317 (4 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown