89.248.172.101

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
191 reports
76 reporters · latest 5 years ago
ISP
FiberXpress BV
Usage Type
Data Center/Web Hosting/Transit
ASN
AS202425
Hostname(s)
scanner.openportstats.com
Domain Name
fiberxpress.net
Country
🇳🇱 Netherlands
City
Amstelveen, North Holland
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

89.248.172.101 has been reported 191 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
191 from 76 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 LogoiLab
zgrab
Bad Web Bot
🇳🇱 awal
Message: IPS Alert 2: Misc Attack. Signature ET DROP Dshield Block Listed Sourcegroup 1. From: 89.248.172.101:37065, to: 10.10.10.10:80, protocol: TCP
Brute-Force Web App Attack
🇳🇱 awal
Message: IPS Alert 2: Misc Attack. Signature ET DROP Dshield Block Listed Sourcegroup 1. From: 89.248.172.101:37829, to: 10.10.10.10:443, protocol: TCP
Brute-Force Web App Attack
🇫🇷 JPPO
Multiport scan 26 ports : 21 22(x5) 80(x4) 443(x5) 666(x3) 990 992(x3) 1234(x4) 1431(x2) 1895(x3) 1900(x4) 3131(x3) 3535(x5) 4128(x2) 5001 5431(x4) 5555(x4) 7547(x4) 8000(x4) 8080(x5) 8081(x5) 8291(x4) 8388(x4) 8443 9000(x4) 16753(x4)
Port Scan
🇫🇷 JPPO
Multiport scan : 4 ports scanned 1900 7547 8000 8081
Port Scan
🇯🇵 stfw
21/tcp 990/tcp 5001/tcp... [2020-11-16/12-26]331pkt,29pt.(tcp),1pt.(udp)
Port Scan
🇵🇭 jethroparker
2020-12-26T06:02:51+08:00 TCP 21
Port Scan
🇧🇾 StatsMe
ET DROP Dshield Block Listed Source group 1
Port Scan Hacking Spoofing Brute-Force
🇵🇱 ChillScanner
<HTTP-ALT> TCP (SYN) 89.248.172.101:56989 -> port 8000, len 44
Port Scan
🇷🇺 andrew.stream
[portscan] tcp/21 [FTP] [portscan] udp/1900 [ssdp] [scan/connect: 2 time(s)] *(RWIN=65535,-)(12261100)
FTP Brute-Force Port Scan Brute-Force
🇵🇱 ChillScanner
<UPNP> UDP 89.248.172.101:46714 -> port 1900, len 125
Port Scan
🇸🇪 mmamljn
FTP Brute-Force Web App Attack SSH
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇷🇸 Smel
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇵🇱 ChillScanner
<FTP> TCP (SYN) 89.248.172.101:57936 -> port 21, len 44
FTP Brute-Force Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 178.83.131.221
🇧🇷 187.8.64.94
🇺🇸 172.70.38.175
🇳🇱 109.160.32.135
🇺🇸 66.228.34.240
🇳🇱 64.205.72.49
🇨🇳 49.74.192.170
🇳🇱 45.148.10.152
🇳🇱 34.147.111.9
🇵🇱 213.201.174.184
🇳🇱 192.144.90.174
🇫🇷 185.210.204.54
🇫🇷 185.197.250.9
🇫🇮 172.83.252.252
🇮🇳 168.144.23.108
🇺🇸 150.136.104.48
🇵🇹 85.242.48.197
🇫🇷 80.87.206.153
🇮🇹 34.17.189.242
🇯🇵 8.216.0.22
feedback