89.117.45.148

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
37% Elevated
37 reports
7 reporters · latest 1 day ago
ISP
Turkcell Iletisim Hizmetleri A.S
Usage Type
Data Center/Web Hosting/Transit
ASN
AS209854
Domain Name
turkcell.com.tr
Country
🇺🇸 United States of America
City
San Francisco, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
37 from 7 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 30 🇩🇪 Germany 3 🇨🇭 Switzerland 1
Most common categories Hacking 22 Brute-Force 22 Port Scan 6 Bad Web Bot 6 Web App Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 LRob
DDoS Attack Bad Web Bot
🇩🇪 nyuuzyou
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-04T12:47:21Z.
Bad Web Bot
🇩🇪 nyuuzyou
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-04T11:21:10Z.
Bad Web Bot
🇺🇸 sargetun
Honeypot: VNC probe on port 5900 at 2026-10-28 13:49:01.951778. Automated report from VPS honeypot.
Port Scan
🇺🇸 drewf.ink
[13:47] Attempted VNC authentication via legacy RFB 003.003 - challenge=44ee915309197de4ad4a7b66f1e62fc1 response=dc099a999d35944352bb241a6c5689f6
Hacking Brute-Force
🇺🇸 drewf.ink
[01:09] Attempted VNC authentication via legacy RFB 003.003 - challenge=72fbdf23d27f7a6a09e0bbc25a4fd3e1 response=5dad86f3cfba61e7a6d043970872bd7a
Hacking Brute-Force
🇨🇭 TOCE
4 hits seen on 2026-10-22, ports 5901 (VNC) on a honeypot from www.toce.ch
Brute-Force
🇺🇸 drewf.ink
[03:34] Attempted VNC authentication via legacy RFB 003.003 - password recovered: s******a
Hacking Brute-Force
🇺🇸 sargetun
Honeypot: VNC probe on port 5900 at 2026-10-11 11:29:27.741980. Automated report from VPS honeypot.
Port Scan
🇺🇸 drewf.ink
[11:29] Attempted VNC authentication via legacy RFB 003.003 - challenge=f974e7144123b06a04d4ba0bd1388209 response=26f79827964a3971a9fb94af43ff5651
Hacking Brute-Force
🇺🇸 sargetun
Honeypot: VNC probe on port 5900 at 2026-10-08 07:58:55.093111. Automated report from VPS honeypot.
Port Scan
🇺🇸 drewf.ink
[07:58] Attempted VNC authentication via legacy RFB 003.003 - challenge=b61ec810a3394901061a3f031ca58e77 response=6bf5bfb1b12dd9ad3653f99ff3230904
Hacking Brute-Force
🇺🇸 drewf.ink
[00:28] Attempted VNC authentication via legacy RFB 003.003 - challenge=0daee857f755dd821c4ab90c0b32afd0 response=8dd9d3725df367f6fc66f0e069a245dd
Hacking Brute-Force
🇺🇸 ipblock.com
IPBlock protected site ID [4055-d][s=02]. Persistent 404, vulnerability scanner
Hacking Bad Web Bot Web App Attack
🇺🇸 drewf.ink
[10:25] Attempted VNC authentication via legacy RFB 003.003 - password recovered: c*****t
Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 144.24.41.47
🇨🇳 123.121.99.16
🇰🇷 121.146.46.146
🇷🇺 78.81.178.208
🇨🇦 75.157.163.232
🇰🇷 59.27.224.90
🇫🇷 185.101.21.28
🇬🇧 172.236.28.161
🇵🇱 162.158.103.200
🇸🇪 104.23.217.88
🇵🇰 103.74.20.59
🇰🇪 102.209.76.137
🇬🇧 89.37.172.135
🇳🇱 45.148.10.157
🇵🇸 24.42.81.157
🇺🇸 4.246.204.51
feedback