89.25.209.90
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- P4 Sp. z o.o.
- Usage Type
- Fixed Line ISP
- ASN
- AS31242
- Hostname(s)
- ip-89-25-209-90.static.play.pl
- Domain Name
- play.pl
- Country
- 🇵🇱 Poland
- City
- Warsaw, Mazovia
Abuse Reports
Total reports
42 from
34 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 36 application-level events across 4 target ports and 36 source port(s). Ports: 1130/service, 1164/service, 2382/service, 5357/service. Sensors: Honeytrap.
|
Port Scan | |
| 🇨🇿 kronos |
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:264 | alerts5m:846
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 9 payload-bearing connection/event(s), 914 payload byte(s) total, maximum payload 517 byte(s). Target port(s): 3918.
|
Port Scan Hacking | |
| 🇨🇿 david1117 |
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=3077,49156
|
Port Scan Hacking | |
| 🇬🇧 KTSTechnology |
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
|
Port Scan | |
| 🇭🇰 sandra361 |
Port scan detected: 11 attempts across 6 ports (1201, 6007, 6566, 19780, 27353, 50006). | Evidence: GHOST_SCAN: IN=eth0 SRC=89.25.209.90 LEN=40 TOS=0x14 PREC=0x00 TTL=112 ID=5484 DF PROTO=TCP SPT=19000 DPT=19780 WINDOW=23899 RES=0x00 SYN URGP=0
|
Port Scan | |
| 🇳🇱 donarev419 |
Connection to port 15742 with data transfer.
Data preview:
|
Port Scan Hacking | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port scan
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential VNC Scan 5800-5820) detectado de 89.25.209.90
|
Port Scan Brute-Force SSH | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 898/tcp, 1455/tcp
|
Port Scan | |
| 🇩🇪 sandra361 |
Port scan detected: 7 attempts across 4 ports (1042,8383,9050,50003). | Evidence: GHOST_SCAN: IN=ens3 SRC=89.25.209.90 LEN=40 TOS=0x00 PREC=0x00 TTL=125 ID=63944 DF PROTO=TCP SPT=19000 DPT=1042 WINDOW=29260 RES=0x00 SYN URGP=0
|
Port Scan | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
|
Hacking | |
| 🇪🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 50003/HoneyTrap | Proto: TCP(1) | Flags: all SYN | TTL: 118 | Len: 40B | Win: 13407(1) | rDNS: host-89.25.209.90.static-ip.3s.pl | F2B/ufw-honeypot@2026-08-19T14:56:50Z
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 34571)
Source port: 19000
TTL: 108
Packet length: 40
TOS: 0x08
This report (for 89.25.209.90) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown