JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.238.233.50

89.238.233.50 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	Euroweb Romania SA
Usage Type	Fixed Line ISP
ASN	AS6663
Hostname(s)	ip4-89-238-233-50.euroweb.ro
Domain Name	turktelekomint.com
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.238.233.50

Whois 89.238.233.50

IP Abuse Reports for 89.238.233.50:

This IP address has been reported a total of 21 times from 14 distinct sources. 89.238.233.50 was first reported on April 10th 2025, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TCP FAILED	2025-06-20 00:42:49 (11 months ago)	TCP Watch Auto Report: Detected a ddos attack and suspicious activity from this IP, indicating a pot ... show more TCP Watch Auto Report: Detected a ddos attack and suspicious activity from this IP, indicating a potential attack show less	DDoS Attack Hacking IoT Targeted
🇹🇷 rtbh.com.tr	2025-06-12 20:07:07 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-06-12 00:07:05 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-06-11 20:07:05 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2025-06-10 23:21:03 (11 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 elijahr	2025-06-05 22:43:52 (11 months ago)	89.238.233.50 - - [05/Jun/2025:18:41:47 -0400] "GET / HTTP/1.1" 400 0 "-" "-" 89.238.233.50 - - [05/ ... show more 89.238.233.50 - - [05/Jun/2025:18:41:47 -0400] "GET / HTTP/1.1" 400 0 "-" "-" 89.238.233.50 - - [05/Jun/2025:18:41:57 -0400] "GET / HTTP/1.1" 400 0 "-" "-" 89.238.233.50 - - [05/Jun/2025:18:42:01 -0400] "GET / HTTP/1.1" 400 0 "-" "-" 89.238.233.50 - - [05/Jun/2025:18:42:04 -0400] "GET / HTTP/1.1" 400 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0" ... show less	Brute-Force
🇳🇱 cheatmaster.store	2025-06-03 07:38:58 (1 year ago)	Open proxy and SSH brute force activity detected from VPS logs	Open Proxy Brute-Force
🇳🇱 cheatmaster.store	2025-06-03 07:32:01 (1 year ago)	Open proxy and SSH brute force activity detected from VPS logs	Open Proxy Brute-Force
🇩🇰 blitzw.in	2025-05-16 10:25:16 (1 year ago)	2025-05-16T09:58:55.787047+00:00 afewmoreserv sshd[2171683]: Failed password for root from 89.238.23 ... show more 2025-05-16T09:58:55.787047+00:00 afewmoreserv sshd[2171683]: Failed password for root from 89.238.233.50 port 41019 ssh2 2025-05-16T10:25:13.851443+00:00 afewmoreserv sshd[2197540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.238.233.50 user=root 2025-05-16T10:25:15.593884+00:00 afewmoreserv sshd[2197540]: Failed password for root from 89.238.233.50 port 55670 ssh2 ... show less	Brute-Force SSH
🇩🇪 NetWatch	2025-05-11 03:48:05 (1 year ago)	The IP 89.238.233.50 tried multiple SSH logins	Brute-Force SSH
🇵🇱 sefinek.net	2025-05-06 19:06:28 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from RO. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from RO. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Port Scan
🇵🇱 sefinek.net	2025-05-06 19:06:28 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from RO. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from RO. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Port Scan
🇨🇿 unhfree.net	2025-05-04 17:56:50 (1 year ago)	May 4 19:56:45 canopus postfix/smtpd[2531552]: 28EF0DC21A9: reject: RCPT from ip4-89-238-233-50.eur ... show more May 4 19:56:45 canopus postfix/smtpd[2531552]: 28EF0DC21A9: reject: RCPT from ip4-89-238-233-50.euroweb.ro[89.238.233.50]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> May 4 19:56:45 canopus postfix/smtpd[2531552]: 28EF0DC21A9: reject: RCPT from ip4-89-238-233-50.euroweb.ro[89.238.233.50]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> May 4 19:56:49 canopus postfix/smtpd[2531552]: NOQUEUE: reject: RCPT from ip4-89-238-233-50.euroweb.ro[89.238.233.50]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> May 4 19:56:49 canopus postfix/smtpd[2531552]: NOQUEUE: r ... show less	Brute-Force Exploited Host
🇺🇸 drewf.ink	2025-04-24 11:36:53 (1 year ago)	[11:36] Attempted SSH login on port 22 with credentials root:amelia	Brute-Force SSH
🇺🇸 drewf.ink	2025-04-24 10:52:35 (1 year ago)	[10:52] Attempted SSH login on port 22 with credentials root:cumshot	Brute-Force SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 2001:448a:9040:adb:41c7:cc8:f701:896

🇰🇷 211.253.9.49

🇺🇸 205.210.31.76

🇨🇷 186.151.101.41

🇨🇳 180.111.30.236

🇫🇮 147.185.133.13

🇨🇳 125.47.52.242

🇮🇳 122.187.174.78

🇫🇮 91.227.114.52

🇳🇱 89.248.163.200

🇩🇪 69.5.169.54

🇺🇸 66.132.186.207

🇨🇳 58.52.106.231

🇨🇦 45.90.222.251

🇺🇸 35.196.107.53

🇳🇱 5.255.122.176

🇳🇱 5.255.99.123

🇸🇾 5.0.161.52

🇨🇳 223.245.216.123

🇳🇱 204.76.203.221