AbuseIPDB » 89.130.45.162
89.130.45.162
This IP was reported 10 times. Confidence of
Abuse
is 4% : ?
ISP
Ya.com Internet Factory
Usage Type
Fixed Line ISP
ASN
AS12479
Hostname(s)
162.pool89-130-45.dynamic.orange.es
Domain Name
ya.com
Country
🇪🇸
Spain
City
Malpartida de Plasencia, Extremadura
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 89.130.45.162 :
This IP address has been reported a total of
10
times from
10 distinct
sources.
89.130.45.162 was first reported on
December 28th 2025 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-21 02:01:12
(2 days ago)
denied traffic to a non-approved destination port. destination port 7908.
Port Scan
🇺🇸
quilla
2026-03-28 23:35:00
(3 months ago)
Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)
DDoS Attack
🇺🇸
anon333
2026-03-20 04:34:21
(4 months ago)
Hacker syslog review 1773981260
Hacking
🇩🇪
KPS
2026-03-20 04:33:37
(4 months ago)
PortscanM
Port Scan
🇯🇵
jay hung
2026-03-20 03:10:52
(4 months ago)
2026-03-19T15:04:31.679336+00:00 quarktech kernel: [10933.455508] [UFW BLOCK] IN=eth0 OUT= MAC=22:00 ...
show more
2026-03-19T15:04:31.679336+00:00 quarktech kernel: [10933.455508] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=89.130.45.162 DST=172.237.29.33 LEN=1184 TOS=0x00 PREC=0x00 TTL=39 ID=58176 DF PROTO=UDP SPT=38003 DPT=9077 LEN=1164
...
show less
Port Scan
🇮🇳
Mr.Singh
2026-03-17 18:30:28
(4 months ago)
NFT blocked 89.130.45.162 on 18-Mar-2026..
Port Scan
Brute-Force
🇨🇦
TechnoSolutions CL
2026-01-09 19:00:04
(6 months ago)
2026-01-09T19:00:01.307202+00:00 lb01 kernel: - [9597329.609016] PORTSCAN_DROP: IN=eth0 OUT= MAC=3a: ...
show more
2026-01-09T19:00:01.307202+00:00 lb01 kernel: - [9597329.609016] PORTSCAN_DROP: IN=eth0 OUT= MAC=3a:07:4f:e8:59:e5:fe:00:00:00:01:01:08:00 SRC=89.130.45.162 DST=159.203.62.209 LEN=60 TOS=0x08 PREC=0x40 TTL=47 ID=18515 DF PROTO=TCP SPT=37560 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
2026-01-09T19:00:02.259611+00:00 lb01 kernel: - [9597330.560820] PORTSCAN_DROP: IN=eth0 OUT= MAC=3a:07:4f:e8:59:e5:fe:00:00:00:01:01:08:00 SRC=89.130.45.162 DST=159.203.62.209 LEN=60 TOS=0x08 PREC=0x40 TTL=47 ID=18516 DF PROTO=TCP SPT=37560 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force
Bad Web Bot
🇦🇹
begou.dev
2026-01-09 17:34:00
(6 months ago)
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/23
Port Scan
🇺🇸
RAP
2026-01-08 07:34:47
(6 months ago)
2026-01-08 07:34:47 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸
TPI-Abuse
2025-12-28 12:37:28
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 89.130.45.162 (162.pool89-130-45.dynamic.orange ...
show more
(mod_security) mod_security (id:210350) triggered by 89.130.45.162 (162.pool89-130-45.dynamic.orange.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 07:37:22.433944 2025] [security2:error] [pid 14633:tid 14633] [client 89.130.45.162:54560] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||autodiscover.winchesterbayvacationrentals.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "autodiscover.winchesterbayvacationrentals.com"] [uri "/"] [unique_id "aVEkgjrZJBuKMdrif6gTOwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: