89.22.52.255

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
36% Elevated
21 reports
19 reporters · latest 1 day ago
ISP
Intronex Setevye Resheniya Ltd.
Usage Type
Fixed Line ISP
ASN
AS59693
Domain Name
intronex.ru
Country
🇷🇺 Russian Federation
City
Ramenskoye, Moscow Oblast
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
21 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇨🇿 Czechia 1 🇩🇪 Germany 1
Most common categories Brute-Force 4 Web App Attack 3 Hacking 2 Bad Web Bot 1 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Kejult
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 3 authentication events observed across 3 source port(s); target port(s): 1433.
Brute-Force
Anonymous
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/2.0, [1/1] done
Hacking Web App Attack
🇹🇷 alastyr
Port scan: probes to 3 unused addresses of AS3188 within 60 s. 50 further packets from this source blocked during the following ban. Ports: 1433. Detected by Alastyr network sensor (XDP).
Port Scan
🇫🇷 Kejult
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 3 authentication events observed across 3 source port(s); target port(s): 1433.
Brute-Force
🇫🇷 Kejult
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 3 authentication events observed across 3 source port(s); target port(s): 1433.
Brute-Force
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 89.22.52.255 2026-11-01T09:27:09+0100 vpn Access-Reject station: 89.22.52.255
Brute-Force Web App Attack
🇩🇪 LRob
Web exploit attempt | method: GET | path: /wp-json/wp/v2/users | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Hacking Web App Attack
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇨🇿 vitex
DDoS Attack Bad Web Bot
🇺🇸 LSPCCU
TSEC Honeypot Network report. Threat score: 67/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH, IoT Targeted. Honeypot: cowrie, ssh-telnet. Context: 89.
Port Scan Hacking Brute-Force Web App Attack SSH IoT Targeted
🇬🇧 PeravixGroup
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
IoT Targeted Brute-Force
Anonymous
Unauthorized connection attempt on Port 23
Port Scan Hacking Exploited Host
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/89.22.52.255
SSH
🇺🇸 MPL
tcp/23
Port Scan
🇰🇿 Sipilen
Possible port scan detected in MikroTik firewall logs: connection-state:new proto UDP proto UDP len 146. Total attempts in last 15m: 12
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 185.247.137.36
🇷🇺 94.190.15.13
🇺🇸 68.183.28.69
🇧🇪 35.210.11.252
🇮🇷 5.160.128.67
🇬🇧 2a06:4880::24
🇧🇴 166.114.143.121
🇺🇸 138.68.13.115
🇻🇳 123.31.31.125
🇺🇸 50.6.202.250
🇯🇵 34.97.156.22
🇺🇸 16.98.78.125
feedback