89.248.172.58
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- FiberXpress BV
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS202425
- Hostname(s)
- no-reverse-dns-configured.com
- Domain Name
- fiberxpress.net
- Country
- 🇳🇱 Netherlands
- City
- Amstelveen, North Holland
No reports in the last 60 days
89.248.172.58 has been reported 11 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
11 from
10 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 Linuxmalwarehuntingnl |
Unauthorized connection attempt
|
Brute-Force | |
| 🇨🇿 0x44 |
[Wed Jul 07 14:18:40.701474 2021] [Spam host detected, attacker try to exploit known vulnerabilities]
...
|
Exploited Host Web App Attack | |
| 🇩🇰 bredelund.dk |
Accessing not existing data/installations
|
Hacking Web App Attack | |
| 🇧🇾 JailSeed |
Tried to find non-existing directory/file on the server
|
Hacking Brute-Force Web App Attack | |
| 🇮🇪 RoboSOC |
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: no-reverse-dns-configured.com.
|
Port Scan | |
| 🇳🇱 IP Analyzer |
Unauthorized connection attempt from IP address 89.248.172.58 on Port 80(HTTP)
|
Brute-Force | |
| 🇵🇱 ChillScanner |
18 probe(s) @ TCP(80)
|
Port Scan | |
| 🇪🇸 ysalak |
Attempted to connect 3 times to port 80 TCP
|
Port Scan | |
| 🇬🇧 AvonleaConsulting |
Brute force attack stopped by firewall
|
Web Spam Brute-Force Web App Attack | |
| 🇬🇧 Shadymint |
url probing from IP marked as abusive
|
Web App Attack | |
| 🇨🇿 0x44 |
--IP hidden--:80 89.248.172.58 - - [14/Jun/2021:19:16:11 +0200] "GET /rgs.mng HTTP/1.1" 403 400 "-" "-"
--IP hidden--:80 89.248.172.58 - - [14/Jun/2021:19:16:28 +0200] "GET /rgs.mng HTTP/1.1" 403 400 "-" "-"
...
|
Exploited Host Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown