89.248.172.95
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- FiberXpress BV
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS202425
- Hostname(s)
- no-reverse-dns-configured.com
- Domain Name
- fiberxpress.net
- Country
- 🇳🇱 Netherlands
- City
- Amstelveen, North Holland
No reports in the last 60 days
89.248.172.95 has been reported 2,071 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
2,071 from
70 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 MPL |
tcp/3398
|
Port Scan | |
| Anonymous |
09/07/2022-15:38:04.061098 89.248.172.95 Protocol: 6 ET SCAN NMAP -sS window 1024
|
Port Scan | |
| Anonymous |
|
Port Scan Brute-Force | |
| Anonymous |
09/07/2022-14:53:00.641935 89.248.172.95 Protocol: 6 ET DROP Dshield Block Listed Source group 1
|
Hacking | |
| 🇺🇸 ISPLtd |
Sep 7 11:35:42 SRC=89.248.172.95 PROTO=TCP SPT=51409 DPT=3389 SYN
Sep 7 11:55:19 SRC=89.248.172.95 PROTO=TCP SPT=52845 DPT=3388 SYN
Sep 7 12:32:14 SRC=89.248.172.95 PROTO=TCP SPT=54279 DPT=3387
...
|
Port Scan | |
| 🇮🇸 ISPLtd |
Sep 7 14:27:59 SRC=89.248.172.95 PROTO=TCP SPT=51409 DPT=3389 SYN
Sep 7 15:07:17 SRC=89.248.172.95 PROTO=TCP SPT=52845 DPT=3388 SYN
Sep 7 15:16:01 SRC=89.248.172.95 PROTO=TCP SPT=54279 DPT=3387
...
|
Port Scan | |
| 🇦🇺 FEWA |
Fail2Ban Ban Triggered
|
Hacking Brute-Force | |
| 🇺🇸 en0 |
89.248.172.95 was recorded 3 times by 3 hosts attempting to connect to 1 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 4162
|
Port Scan | |
| Anonymous |
09/07/2022-13:28:24.257737 89.248.172.95 Protocol: 6 ET DROP Dshield Block Listed Source group 1
|
Hacking | |
| 🇫🇷 JPPO |
|
Port Scan | |
| 🇨🇦 ISPLtd |
Sep 4 09:35:01 SRC=89.248.172.95 PROTO=TCP SPT=53610 DPT=63388 SYN
Sep 4 09:56:34 SRC=89.248.172.95 PROTO=TCP SPT=55045 DPT=64389 SYN
Sep 4 10:06:02 SRC=89.248.172.95 PROTO=TCP SPT=56478 DPT=65389
...
|
Port Scan | |
| Anonymous |
09/04/2022-08:10:23.094291 89.248.172.95 Protocol: 6 ET DROP Dshield Block Listed Source group 1
|
Hacking | |
| 🇺🇸 en0 |
89.248.172.95 was recorded 63 times by 13 hosts attempting to connect to 11 unique ports. Incident counter (4h, 24h, all-time): 63, 263, 4129
|
Port Scan | |
| Anonymous |
09/04/2022-07:29:25.147093 89.248.172.95 Protocol: 6 ET SCAN NMAP -sS window 1024
|
Port Scan | |
| Anonymous |
09/04/2022-06:41:41.922388 89.248.172.95 Protocol: 6 ET SCAN NMAP -sS window 1024
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown