89.108.126.48

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
75% Critical
14 reports
12 reporters · latest 2 hours ago
ISP
Reg.Ru Hosting
Usage Type
Data Center/Web Hosting/Transit
ASN
AS197695
Domain Name
reg.ru
Country
🇷🇺 Russian Federation
City
Moscow, Moscow
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
14 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇭🇰 Hong Kong 3 🇫🇷 France 2
Most common categories Port Scan 14 Brute-Force 2 Hacking 2 DDoS Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇼 kk_it_man
Port Scan
Anonymous
8317/tcp,3065/tcp,8790/tcp,18789/tcp (4 or more attempts)
Port Scan
Anonymous
2026-11-12 09:00:05 warning[1355896]: host unknown[89.108.126.48]: unauthorized access attempted: tcp/8317
Port Scan Brute-Force
🇳🇵 radheykrishna.com.np
Nov 12 10:32:54 kernel: [3364106.924555] [UFW BLOCK] IN=ens160 OUT= SRC=89.108.126.48 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=24927 PROTO=TCP SPT=14234 DPT=7867 WINDOW=65535 RES=0x00 SYN URGP=0 ...
Port Scan
🇺🇸 donarev419
Connection to port 7867 with data transfer. Data preview: GET /panel/api/overview HTTP/1.1 Host: 198.23.188.201 Connection: close User-Agent: curl/8 Accep
Port Scan Hacking
🇩🇪 Ilop
[v7-22] Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=7867,8317,8790, src_ip=89.108.126.48
Port Scan Hacking
🇬🇧 sandra361
Port scan detected: 8 packets across 2 ports (7867, 8317). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=89.108.126.48 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=36610 DF PROTO=TCP SPT=54768 DPT=7867 WINDOW=64240 RES=0x00 ACK FIN URGP=0
Port Scan
Anonymous
Triggered: repeated knocking on closed ports.
Port Scan
🇫🇷 Little Iguana
trying to access non-authorized port
Port Scan
🇩🇪 marcel-knorr.de
[MK-Root1] Blocked by UFW
Brute-Force Port Scan
Anonymous
Port Scan
🇩🇪 phil2k
DDoS Attack Port Scan
🇮🇱 Ilop
[v5-99] Port scan: 3 packet(s) from 89.108.126.48 to 3 distinct destination ports (7867,8790,8317) blocked at the perimeter (automated sensor)
Port Scan
🇭🇰 sandra361
Port scan detected: 8 packets across 1 port (8317). | Evidence: REAPER_TARPIT: IN=eth0 SRC=89.108.126.48 LEN=40 TOS=0x14 PREC=0x00 TTL=47 ID=9332 DF PROTO=TCP SPT=53666 DPT=8317 WINDOW=64240 RES=0x00 ACK FIN URGP=0
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 195.184.76.188
🇺🇸 195.184.76.139
🇬🇧 81.19.219.217
🇺🇸 51.8.102.120
🇺🇸 40.223.203.200
🇷🇸 178.148.219.28
🇺🇸 40.160.148.69
🇩🇪 35.242.242.65
🇺🇸 34.138.158.87
🇧🇷 34.95.198.83
🇧🇪 34.79.135.70
🇨🇦 34.19.178.96
🇨🇳 183.239.20.236
🇺🇸 172.233.219.44
🇩🇪 167.94.146.52
🇺🇸 136.115.151.150
🇹🇼 114.35.59.237
🇨🇳 101.96.212.62
🇻🇳 101.36.103.57
🇷🇴 92.118.39.49
feedback