89.109.49.208

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
49% Elevated
33 reports
28 reporters ยท latest 1 month ago
ISP
PJSC Rostelecom
Usage Type
Fixed Line ISP
ASN
AS12389
Domain Name
rt.ru
Country
๐Ÿ‡ท๐Ÿ‡บ Russian Federation
City
Nizhniy Novgorod, Nizhny Novgorod Oblast
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
33 from 28 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 7 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 5 ๐Ÿ‡ซ๐Ÿ‡ท France 2
Most common categories Port Scan 16 SSH 11 Brute-Force 8 Hacking 5 Exploited Host 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
Port Scan
Anonymous
Blocked by firewall on hugin [22/tcp] | Rule: UFW | SPT: 21869 | TTL: 53 | LEN: 60 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SSH
๐Ÿ‡ซ๐Ÿ‡ฎ GamesGames
SSH login attempts
Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ sumnone
Port probing on unauthorized port 22
Port Scan Hacking Exploited Host
Anonymous
2026-10-13T09:19:45.873335+00:00 HongKong1 sshd-session[1085967]: Connection closed by 89.109.49.208 port 10268 [preauth] 2026-10-13T09:19:56.255819+00:00 HongKong1 sshd-session[1086567]: Connection closed by 89.109.49.208 port 9858 [preauth] ...
Brute-Force SSH
๐Ÿ‡ท๐Ÿ‡ธ Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
๐Ÿ‡จ๐Ÿ‡ญ blinx
Caught by endlessh, wasted time: 21s
Brute-Force SSH
๐Ÿ‡ฆ๐Ÿ‡น hxsain
Blocked by UFW on fr2 [23/tcp] | SPT: 15123 | TTL: 52 | LEN: 60 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan IoT Targeted
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-12 06:32:25 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ฎ๐Ÿ‡ณ Mr.Singh
NFT blocked 89.109.49.208 after 2 rejections on 12-Oct-2026.
Port Scan Brute-Force
๐Ÿ‡ฏ๐Ÿ‡ต S.O.B.A. Dev.
Repeated SSH login failures
SSH Port Scan Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช bescared
F2B - Malicious activity detected. Unauthorized connection attempt: SSH. -8ff06ede-
Port Scan SSH
๐Ÿ‡บ๐Ÿ‡ธ NetVexor
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan Hacking Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ mibbsdevs
CoffeePot: Connection attempt detected on closed service bait ports (21/22/23/3306/3389/5432).
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Port Scan Attack proto:TCP src:15074 dst:23
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡จ๐Ÿ‡ณ 114.246.241.87
๐Ÿ‡ณ๐Ÿ‡ฑ 216.203.20.227
๐Ÿ‡ฒ๐Ÿ‡ฟ 196.3.99.226
๐Ÿ‡บ๐Ÿ‡ธ 188.213.202.129
๐Ÿ‡ต๐Ÿ‡ฑ 172.64.200.193
๐Ÿ‡บ๐Ÿ‡ธ 142.93.16.100
๐Ÿ‡บ๐Ÿ‡ธ 64.49.36.179
๐Ÿ‡ฐ๐Ÿ‡ฟ 45.255.125.63
๐Ÿ‡ณ๐Ÿ‡ฑ 213.209.159.26
๐Ÿ‡บ๐Ÿ‡ธ 173.239.240.56
๐Ÿ‡บ๐Ÿ‡ธ 173.239.240.45
๐Ÿ‡บ๐Ÿ‡ธ 173.239.240.36
๐Ÿ‡ง๐Ÿ‡ท 170.231.4.227
๐Ÿ‡ท๐Ÿ‡บ 146.158.98.192
๐Ÿ‡ธ๐Ÿ‡พ 128.0.7.130
๐Ÿ‡จ๐Ÿ‡ฆ 20.200.64.201
๐Ÿ‡ฌ๐Ÿ‡ง 185.247.137.30
๐Ÿ‡บ๐Ÿ‡ธ 165.227.16.226
๐Ÿ‡บ๐Ÿ‡ธ 159.89.151.250
๐Ÿ‡ฉ๐Ÿ‡ช 69.5.169.65
feedback