89.109.49.75
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- PJSC Rostelecom
- Usage Type
- Fixed Line ISP
- ASN
- AS12389
- Hostname(s)
- 89-109-49-75.dynamic.mts-nn.ru
- Domain Name
- rt.ru
- Country
- 🇷🇺 Russian Federation
- City
- Nizhniy Novgorod, Nizhny Novgorod Oblast
Abuse Reports
Total reports
28 from
16 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:14108 dst:23
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:33774 dst:23
|
Port Scan | |
| 🇯🇵 S.O.B.A. Dev. |
Repeated SSH login failures
|
SSH Port Scan Brute-Force | |
| 🇫🇷 Entalpi.net |
Tried to hit sensible closed port commonly used in attacks
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 22.
|
Port Scan Hacking | |
| 🇦🇺 Klaverstyn |
Connection to SSH honeypot
|
Brute-Force SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:23413 dst:23
|
Port Scan | |
| 🇳🇱 PixelSlimepup |
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-10-10T00:15:27Z
|
Brute-Force SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:16318 dst:23
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-09 05:25:20 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇺🇸 copyyy |
sshd[191984]: Connection attempt from 89.109.49.75 port 14757 ssh2; SSH honeypot on TCP/22.
|
Brute-Force SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-10-02 15:42:44 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-02 11:07:54 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| Anonymous |
denied traffic to a honeypot network. destination port 22.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown