AbuseIPDB » 89.248.165.104

Check an IP Address, Domain Name, or Subnet

e.g. 3.236.46.172, microsoft.com, or 5.188.10.0/24

89.248.165.104 was found in our database!

This IP was reported 50,461 times. Confidence of Abuse is 0%: ?

ISP	FiberXpress BV
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	recyber.net
Domain Name	fiberxpress.net
Country	Netherlands
City	Amsterdam, Noord-Holland

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 89.248.165.104

Whois 89.248.165.104

IP Abuse Reports for 89.248.165.104:

This IP address has been reported a total of 50,461 times from 225 distinct sources. 89.248.165.104 was first reported on January 14th 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
droltr	03 Jul 2023	Reported by IP Checker.	Brute-Force SSH
SecurityAnalyst2	24 Jun 2023	ET SCAN Suspicious inbound to mySQL port 3306	Port Scan Hacking
stfw	02 Jun 2023	5188/tcp 14/tcp 8017/tcp... [2023-04-01/05-31]3367pkt,1046pt.(tcp)	Port Scan
MPL	01 Jun 2023	tcp port scan (4 or more attempts)	Port Scan
invalidLuca	31 May 2023	[UFW] Unauthorized connection attempt from 89.248.165.104	Port Scan
Anonymous	31 May 2023	2023-05-31T17:49:39.745573piguard kernel: [25038326.351372] [UFW BLOCK] IN=ens3 OUT= MAC=0a:49:bb:1b ... show more2023-05-31T17:49:39.745573piguard kernel: [25038326.351372] [UFW BLOCK] IN=ens3 OUT= MAC=0a:49:bb:1b:6c:53:fe:00:00:00:01:01:08:00 SRC=89.248.165.104 DST=64.225.59.127 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=30185 PROTO=TCP SPT=49207 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 2023-05-31T18:15:30.929507piguard kernel: [25039877.515813] [UFW BLOCK] IN=ens3 OUT= MAC=0a:49:bb:1b:6c:53:fe:00:00:00:01:01:08:00 SRC=89.248.165.104 DST=64.225.59.127 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=36950 PROTO=TCP SPT=50538 DPT=54389 WINDOW=1024 RES=0x00 SYN URGP=0 2023-05-31T18:28:50.431271piguard kernel: [25040677.006614] [UFW BLOCK] IN=ens3 OUT= MAC=0a:49:bb:1b:6c:53:fe:00:00:00:01:01:08:00 SRC=89.248.165.104 DST=64.225.59.127 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=9149 PROTO=TCP SPT=50538 DPT=38989 WINDOW=1024 RES=0x00 SYN URGP=0 2023-05-31T18:55:10.566592piguard kernel: [25042257.120729] [UFW BLOCK] IN=ens3 OUT= MAC=0a:49:bb:1b:6c:53:fe:00:00:00:01:01:08:00 SRC=89.248.165.104 DST=64.225.59.127 LEN=40 TOS=0 ... show less	Port Scan Brute-Force
MPL	31 May 2023	tcp port scan (5 or more attempts)	Port Scan
MPL	31 May 2023	tcp port scan (9 or more attempts)	Port Scan
MPL	31 May 2023	tcp port scan (106 or more attempts)	Port Scan
Blodröd	31 May 2023	Port scanning	Port Scan
en0	31 May 2023	89.248.165.104 was recorded 19 times by 13 hosts attempting to connect to 17 unique ports. Incident ... show more89.248.165.104 was recorded 19 times by 13 hosts attempting to connect to 17 unique ports. Incident counter (4h, 24h, all-time): 19, 94, 50792 show less	Port Scan
bnt	31 May 2023	[Masscan] 89.248.165.104 - Port: 8018 - Seq: 1539962783	Port Scan
bakunin1848	31 May 2023	Firewall IPS Detection on 31-05-2023 at 22:22:05	Port Scan Exploited Host
IP Analyzer	31 May 2023	Unauthorized connection attempt from IP address 89.248.165.104 on Port 5080	Port Scan
EticCybersecurity	31 May 2023	Port Scan 2023-05-31T18:13:47.389Z -> 89.248.165.104 scanned port 5101 on one of our servers	Hacking