This IP address has been reported a total of
145
times from
122 distinct
sources.
89.167.0.104 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 4, successful: ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 4, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (eu1) over 2026-10-14..2026-10-14. Reported by an SSH honeypot network; no production service involved.
show less
89.167.0.104 fell into Endlessh tarpit; 0/3 total connections are currently still open. Total time w ...
show more89.167.0.104 fell into Endlessh tarpit; 0/3 total connections are currently still open. Total time wasted: 10s. Total bytes sent by tarpit: 1.00KiB. Report generated by Endlessh Report Generator v1.2.3
show less
89.167.0.104 fell into Endlessh tarpit; 0/4 total connections are currently still open. Total time w ...
show more89.167.0.104 fell into Endlessh tarpit; 0/4 total connections are currently still open. Total time wasted: 15s. Total bytes sent by tarpit: 1.00KiB. Report generated by Endlessh Report Generator v1.2.3
show less
2026-10-15T01:45:37.970276+02:00 gaia sshd[379741]: Failed password for invalid user root from 89.16 ...
show more2026-10-15T01:45:37.970276+02:00 gaia sshd[379741]: Failed password for invalid user root from 89.167.0.104 port 59662 ssh2
2026-10-15T01:47:00.547333+02:00 gaia sshd[380286]: Connection from 89.167.0.104 port 37954 on 23.88.28.109 port 22 rdomain ""
2026-10-15T01:47:00.657875+02:00 gaia sshd[380286]: User root from 89.167.0.104 not allowed because not listed in AllowUsers
...
show less
Oct 15 01:43:50 h2930838 sshd[23046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreOct 15 01:43:50 h2930838 sshd[23046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.167.0.104 user=root
Oct 15 01:43:52 h2930838 sshd[23046]: Failed password for invalid user root from 89.167.0.104 port 52838 ssh2
show less
Brute-Force
SSH
Anonymous
Oct 15 00:16:10 sonne sshd[3988783]: Failed password for root from 89.167.0.104 port 55004 ssh2
Oct ...
show moreOct 15 00:16:10 sonne sshd[3988783]: Failed password for root from 89.167.0.104 port 55004 ssh2
Oct 15 00:42:37 sonne sshd[4018865]: Connection from 89.167.0.104 port 45576 on 85.215.122.93 port 22 rdomain ""
Oct 15 00:42:37 sonne sshd[4018865]: Failed none for root from 89.167.0.104 port 45576 ssh2
Oct 15 00:42:37 sonne sshd[4018865]: Failed password for root from 89.167.0.104 port 45576 ssh2
Oct 15 01:11:17 sonne sshd[4055709]: Connection from 89.167.0.104 port 42738 on 85.215.122.93 port 22 rdomain ""
Oct 15 01:11:17 sonne sshd[4055709]: Failed none for root from 89.167.0.104 port 42738 ssh2
Oct 15 01:11:17 sonne sshd[4055709]: Failed password for root from 89.167.0.104 port 42738 ssh2
Oct 15 01:39:20 sonne sshd[4087476]: Connection from 89.167.0.104 port 58998 on 85.215.122.93 port 22 rdomain ""
Oct 15 01:39:21 sonne sshd[4087476]: Failed none for root from 89.167.0.104 port 58998 ssh2
Oct 15 01:39:21 sonne sshd[4087476]: Failed password for root from 89.167.0.104 port 58998 ssh2
...
show less
(sshd) Failed SSH login from 89.167.0.104 (DE/Germany/Bavaria/Gunzenhausen/static.104.0.167.89.clien ...
show more(sshd) Failed SSH login from 89.167.0.104 (DE/Germany/Bavaria/Gunzenhausen/static.104.0.167.89.clients.your-server.de/[redacted])
show less
Brute-Force
SSH
Showing 1 to
15
of 145 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩