89.148.2.3

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
44% Elevated
21 reports
18 reporters · latest 4 weeks ago
ISP
Batelco ADSL service
Usage Type
Fixed Line ISP
ASN
AS5416
Domain Name
batelco.com.bh
Country
🇧🇭 Bahrain
City
Manama, Manama
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
21 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 7 🇩🇪 Germany 6 🇫🇮 Finland 2
Most common categories Port Scan 18 Hacking 9 Brute-Force 5 SQL Injection 2 Exploited Host 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 RAP
2026-10-16 08:08:57 UTC Unauthorized activity to TCP port 1433. SQL
Port Scan
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 245 | Len: 40B | Win: 1024(1) | rDNS: dynamic.ip.89.148.2.3.batelco.com.bh | F2B/ufw-honeypot@2026-10-15T05:01:46Z
Port Scan Hacking
🇺🇸 HamSammich
Automated sensor: 1 MSSQL connection/probe attempts over the last 24h (latest 2026-10-14T23:48Z).
Hacking Brute-Force
🇺🇸 avgsmoe
Connection to a honeypot port. Automated report (firemon).
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 445
Port Scan Hacking Exploited Host
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=48423 dstport=445
Port Scan
🇺🇸 RAP
2026-10-12 09:54:14 UTC Unauthorized activity to TCP port 445. SMB
Port Scan
🇦🇷 Bruno
Port Scanner: 89.148.2.3
Port Scan
🇺🇸 RAP
2026-10-12 06:22:43 UTC Unauthorized activity to TCP port 445. SMB
Port Scan
🇷🇸 Smel
SQL/MH Probe, Scan, Hack -
Port Scan Hacking SQL Injection
🇩🇪 bancix
Heimdallr NIDS: Automatic ban triggered. Reason: TRAP_PORT_HIT (porta 1433)
Port Scan
Anonymous
Repeated unauthorized connection attempts to restricted service observed.
Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Web App Attack
🇪🇸 jiossal
IP_Trapped_MikroTik_Firewall_HoneyPot
Brute-Force
Anonymous
denied SMB access attempt. destination port 445.
Port Scan Hacking
🇩🇪 DasDuo
Attempt on port 1433 (MSSQL) - potential unauthorized database access attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
Port Scan Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 187.138.129.45
🇧🇷 172.71.238.95
🇸🇬 152.42.164.200
🇸🇬 139.59.253.197
🇳🇱 138.226.239.234
🇻🇳 115.76.108.233
🇺🇦 95.46.143.39
🇳🇱 77.239.124.71
🇵🇰 14.1.105.92
🇨🇳 223.247.153.211
🇵🇰 223.123.73.75
🇵🇰 223.123.73.57
🇻🇳 221.121.4.187
🇷🇺 213.5.125.215
🇺🇸 192.253.209.52
🇧🇬 185.137.164.208
🇮🇳 128.185.64.249
🇰🇷 119.204.122.94
🇰🇷 118.35.190.116
feedback