89.109.49.190
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- PJSC Rostelecom
- Usage Type
- Fixed Line ISP
- ASN
- AS12389
- Hostname(s)
- 89-109-49-190.dynamic.mts-nn.ru
- Domain Name
- rt.ru
- Country
- 🇷🇺 Russian Federation
- City
- Nizhniy Novgorod, Nizhny Novgorod Oblast
Abuse Reports
Total reports
20 from
18 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇩🇪 Mirage2026 |
Blocked by firewall: 5 unsolicited inbound connection attempt(s) to 2 port(s) (TCP): 22 23
|
Port Scan SSH IoT Targeted | |
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-04T12:25:06Z.
|
Bad Web Bot | |
| 🇩🇪 LRob |
Shop search flood (L7 DDoS) | path: /2-accueil | query: q=Famille-Speedster-Terra+Race-Strike+eRIDE | src_port: 3040
|
DDoS Attack Web App Attack | |
| 🇮🇳 Parth Maniar |
This IP address carried out 4 port scanning attempts on 22-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
|
Port Scan SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:15611 dst:23
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-22 14:00:38 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇳🇴 amaco |
SSH brute-force attempt detected.
|
Port Scan Brute-Force SSH | |
| 🇨🇦 design2web.ca |
[UniFi FW] SSH unauthorized access attempt on port 22 (SSH) | Policy: Region Blocking | Proto: TCP | Src: 89.109.49.190:14550 | SrcRegion: RU | Svc: SSH | Detected: 2026-10-22 08:10:14 UTC | ISP: Rostelecom networks | D2W UniFi AbuseIPDB Reporter v2
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
|
Port Scan | |
| 🇰🇷 winter |
Connection attemp from 89.109.49.190 to port 22
|
Brute-Force SSH | |
| 🇺🇸 RAP |
2026-10-22 00:26:24 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇱🇹 NotACaptcha |
Unauthorised access (Oct 21 23:46) SRC=89.109.49.190 LEN=60 TTL=54 ID=144 DF TCP DPT=23 WINDOW=43560 SYN
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:12231 dst:23
|
Port Scan | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown