AbuseIPDB » 89.148.196.156

89.148.196.156 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 16%: ?

16%

ISP	MTS PJSC
Usage Type	Fixed Line ISP
ASN	AS15640
Domain Name	mts.ru
Country	Russian Federation
City	Perm, Perm Krai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 89.148.196.156

Whois 89.148.196.156

IP Abuse Reports for 89.148.196.156:

This IP address has been reported a total of 10 times from 3 distinct sources. 89.148.196.156 was first reported on November 8th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-01-12 05:57:40 (1 day ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2025-01-07 13:24:47 (6 days ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-12-15 11:39:03 (4 weeks ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
unhfree.net	2024-12-07 13:37:05 (1 month ago)	Dec 7 06:43:34 canopus postfix/smtpd[332382]: improper command pipelining after CONNECT from unknow ... show moreDec 7 06:43:34 canopus postfix/smtpd[332382]: improper command pipelining after CONNECT from unknown[89.148.196.156]: \026\003\001\0016\001\000\0012\003\003\243\vxF\235\202AC\320"\021=z^o\321p\027[\267\305\202\v3\251\204\352\362\236LK\275\000\000\264\3000\300,\300(\300$\300\024\300\n\000\245\000\243\000\241\000\237\000k\000j\000i\000h\0009\0008\0007\0006\000\210\000\207\000\206\000\205\300\031\3002\300.\300\300& Dec 7 08:00:52 canopus postfix/smtpd[344427]: improper command pipelining after CONNECT from unknown[89.148.196.156]: \026\003\001\0016\001\000\0012\003\003\361\030\306.NG\230\257T\022\017\330\271\037\177\261\315\223q\214\260\036\353\221\365\275\0358\272\353[\367\000\000\264\3000\300,\300(\300$\300\024\300\n\000\245\000\243\000\241\000\237\000k\000j\000i\000h\0009\0008\0007\0006\000\210\000\207\000\206\000\205\300\031\3002\300.\300\300& Dec 7 10:03:49 canopus postfix/smtpd[354291]: improper command pipelining after CONNECT from unknown[89.148.196.156]: \026\003\001\0016\00 ... show less	Brute-Force Exploited Host
Anonymous	2024-12-07 11:16:58 (1 month ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-12-03 15:00:20 (1 month ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
UFFR_87	2024-11-21 17:57:00 (1 month ago)	<?xml version='1.0' encoding='utf-8'?><feedback><report_metadata><org_name>Mail. ... show more<?xml version='1.0' encoding='utf-8'?><feedback><report_metadata><org_name>Mail.Ru</org_name><email>[email protected]</email><extra_contact_info>http://help.mail.ru/mail-help</extra_contact_info><report_id>40145950346312037641732060800</report_id><date_range><begin>1732060800</begin><end>1732147200</end></date_range></report_metadata><policy_published><domain>u-group13.org</domain><adkim>s</adkim><aspf>s</aspf><p>quarantine</p><sp>quarantine</sp><pct>100</pct></policy_published><record><row><source_ip>89.148.196.156</source_ip><count>1</count><policy_evaluated><disposition>quarantine</disposition><dkim>fail</dkim><spf>fail</spf></policy_evaluated></row><identifiers><header_from>u-group13.org</header_from></identifiers><auth_results><spf><domain>u-group13.org</domain><scope>mfrom</scope><result>softfail</result></spf></auth_results></record></feedback> show less	Email Spam
Anonymous	2024-11-16 09:29:37 (1 month ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-11-12 05:43:00 (2 months ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-11-08 07:12:14 (2 months ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ... show morePorts: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH