89.109.48.38
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- PJSC Rostelecom
- Usage Type
- Fixed Line ISP
- ASN
- AS12389
- Hostname(s)
- 89-109-48-38.dynamic.mts-nn.ru
- Domain Name
- rt.ru
- Country
- 🇷🇺 Russian Federation
- City
- Nizhniy Novgorod, Nizhny Novgorod Oblast
Abuse Reports
Total reports
41 from
32 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 cunning-fox |
SSH brute-force login attempts observed.
|
Brute-Force SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 9276
TTL: 48
Packet length: 60
TOS: 0x00
This report (for 89.109.48.38) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:33162 dst:23
|
Port Scan | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 49 | Len: 60B | Win: 65535(1) | rDNS: 89-109-48-38.dynamic.mts-nn.ru | F2B/ufw-honeypot@2026-10-07T09:54:57Z
|
Port Scan Hacking | |
| 🇹🇭 Sawasdee |
SSH break in attempt
...
|
SSH | |
| 🇵🇱 pshost.pl |
2026-10-07T02:17:01.414Z, an unauthorized SSH access attempt was detected from source IP address 89.109.48.38 by our NetFlow-based intrusion detection.
|
Port Scan Brute-Force SSH | |
| 🇩🇪 derLoosi |
HV1.2 Blocked by UFW
|
Port Scan | |
| 🇺🇸 benjensen |
SSH honeypot — automated credential stuffing and scanning detected by Cowrie honeypot
|
Brute-Force SSH | |
| 🇩🇪 David Ferneding |
Blocked by UFW (TCP on 23)
Source port: 20837
TTL: 55
Packet length: 60
TOS: 0x00
This report (for 89.109.48.38) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇨🇦 polycoda |
AutoBlock: 📡 Port 22 Scan (Non Decay-Based)
|
Port Scan SSH | |
| 🇦🇹 begou.dev |
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/23
|
Port Scan | |
| 🇩🇪 xdee111 |
Unauthorized SSH connection attempt (cowrie) on home server, banned by fail2ban
|
Brute-Force SSH | |
| 🇺🇸 MPL |
tcp ports: 22,23 (16 or more attempts)
|
Port Scan | |
| 🇺🇸 HamSammich |
Automated sensor: 3 SSH, telnet connection/probe attempts over the last 24h (latest 2026-10-04T06:04Z).
|
Brute-Force SSH IoT Targeted | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 22
|
Port Scan Hacking Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown