89.248.172.140
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- FiberXpress BV
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS202425
- Hostname(s)
- scanner.openportstats.com
- Domain Name
- fiberxpress.net
- Country
- 🇳🇱 Netherlands
- City
- Amstelveen, North Holland
No reports in the last 60 days
89.248.172.140 has been reported 1,009 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
1,009 from
52 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 Linuxmalwarehuntingnl |
Unauthorized connection attempt
|
Brute-Force | |
| 🇳🇱 awal |
Message: IPS Alert 2: Misc Attack. Signature ET CINS Active Threat IntelligencePoor Reputation IP group 79. From: 89.248.172.140:49745, to: 10.10.10.10:5070,protocol: TCP
|
Brute-Force Web App Attack | |
| 🇳🇱 awal |
Message: IPS Alert 2: Misc Attack. Signature ET DROP Dshield Block Listed Sourcegroup 1. From: 89.248.172.140:49745, to: 10.10.10.10:5070, protocol: TCP
|
Brute-Force Web App Attack | |
| 🇫🇷 JPPO |
|
Port Scan | |
| 🇳🇱 awal |
Message: IPS Alert 2: Misc Attack. Signature ET CINS Active Threat IntelligencePoor Reputation IP group 76. From: 89.248.172.140:41225, to: 10.10.10.10:8800,protocol: TCP
|
Brute-Force Web App Attack | |
| 🇳🇱 awal |
Message: IPS Alert 2: Misc Attack. Signature ET DROP Dshield Block Listed Sourcegroup 1. From: 89.248.172.140:41225, to: 10.10.10.10:8800, protocol: TCP
|
Brute-Force Web App Attack | |
| 🇫🇷 JPPO |
Multiport scan : 5 ports scanned 3367 8892 8895 8898 8899
|
Port Scan | |
| ChillScanner |
<SUN-ANSWERBOOK> TCP (SYN) 89.248.172.140:50682 -> port 8888, len 44
|
Port Scan | |
| ChillScanner |
<SUN-ANSWERBOOK> TCP (SYN) 89.248.172.140:50682 -> port 8888, len 40
|
Port Scan | |
| fred |
scans 8 times in preceeding hours on the ports (in chronological order) 3368 3374 3381 8890 8898 8893 8889 8884 resulting in total of 89 scans from 89.248.160.0/20 block.
|
Port Scan | |
| ChillScanner |
<SUN-ANSWERBOOK> TCP (SYN) 89.248.172.140:50682 -> port 8888, len 44
|
Port Scan | |
| 🇯🇵 stfw |
8883/tcp 8893/tcp 8894/tcp...
[2020-11-06/2021-01-04]2252pkt,582pt.(tcp)
|
Port Scan | |
| 🇬🇧 Joe-Mark |
Found on CINS badguys / proto=6 . srcport=57392 . dstport=3384 . (705)
|
Hacking Brute-Force | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 8889/tcp, 8897/tcp
|
Port Scan | |
| Anonymous |
Port scan on 3 port(s): 8881 8884 8888
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown