AbuseIPDB » 89.38.247.73

89.38.247.73 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 56%: ?

56%

ISP	Telecommunication Company of Tehran
Usage Type	Fixed Line ISP
ASN	AS58224
Domain Name	tci.ir
Country	Iran (Islamic Republic of)
City	Tehran, Tehran

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 89.38.247.73

Whois 89.38.247.73

IP Abuse Reports for 89.38.247.73:

This IP address has been reported a total of 20 times from 17 distinct sources. 89.38.247.73 was first reported on June 11th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-06-17 13:33:01 (3 weeks ago)	sshd	Brute-Force SSH
Woodie	2025-06-17 03:09:01 (3 weeks ago)	2025-06-16T23:08:47.033050-04:00 debian sshd[3026689]: Failed password for root from 89.38.247.73 po ... show more2025-06-16T23:08:47.033050-04:00 debian sshd[3026689]: Failed password for root from 89.38.247.73 port 56031 ssh2 2025-06-16T23:08:51.188822-04:00 debian sshd[3026689]: Failed password for root from 89.38.247.73 port 56031 ssh2 2025-06-16T23:08:53.816089-04:00 debian sshd[3026689]: Failed password for root from 89.38.247.73 port 56031 ssh2 2025-06-16T23:08:57.977871-04:00 debian sshd[3026689]: Failed password for root from 89.38.247.73 port 56031 ssh2 2025-06-16T23:09:00.803141-04:00 debian sshd[3026689]: Failed password for root from 89.38.247.73 port 56031 ssh2 ... show less	Brute-Force SSH
urnilxfgbez	2025-06-16 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
rtbh.network	2025-06-15 21:15:13 (3 weeks ago)	Brute Force, tcp/22	Brute-Force
swrlly	2025-06-15 04:39:21 (3 weeks ago)	ssh bruteforce	Brute-Force SSH
urnilxfgbez	2025-06-14 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
yzfdude1	2025-06-14 07:00:56 (3 weeks ago)	Jun 14 01:00:45 mickey sshd[1882176]: error: maximum authentication attempts exceeded for root from ... show moreJun 14 01:00:45 mickey sshd[1882176]: error: maximum authentication attempts exceeded for root from 89.38.247.73 port 45372 ssh2 [preauth] Jun 14 01:00:53 mickey sshd[1882179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.38.247.73 user=root Jun 14 01:00:54 mickey sshd[1882179]: Failed password for root from 89.38.247.73 port 45405 ssh2 ... show less	Brute-Force SSH
roki.ovh	2025-06-14 00:28:13 (3 weeks ago)	Jun 14 02:27:58 roki2 sshd\[10037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 ... show moreJun 14 02:27:58 roki2 sshd\[10037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.38.247.73 user=root Jun 14 02:28:01 roki2 sshd\[10037\]: Failed password for root from 89.38.247.73 port 53090 ssh2 Jun 14 02:28:03 roki2 sshd\[10037\]: Failed password for root from 89.38.247.73 port 53090 ssh2 Jun 14 02:28:05 roki2 sshd\[10037\]: Failed password for root from 89.38.247.73 port 53090 ssh2 Jun 14 02:28:07 roki2 sshd\[10037\]: Failed password for root from 89.38.247.73 port 53090 ssh2 ... show less	Brute-Force SSH
rtbh.com.tr	2025-06-13 20:07:07 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
6kilowatti	2025-06-13 08:35:01 (3 weeks ago)	2025-06-13T10:34:58.653653+02:00 mummo sshd[1502826]: pam_unix(sshd:auth): authentication failure; l ... show more2025-06-13T10:34:58.653653+02:00 mummo sshd[1502826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.38.247.73 user=root 2025-06-13T10:35:00.295425+02:00 mummo sshd[1502826]: Failed password for root from 89.38.247.73 port 44966 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-06-13 08:25:04 (3 weeks ago)	2025-06-13T10:24:55.880886+02:00 ubuntu sshd-session[36802]: Failed password for root from 89.38.247 ... show more2025-06-13T10:24:55.880886+02:00 ubuntu sshd-session[36802]: Failed password for root from 89.38.247.73 port 45875 ssh2 2025-06-13T10:24:57.864148+02:00 ubuntu sshd-session[36802]: Failed password for root from 89.38.247.73 port 45875 ssh2 2025-06-13T10:24:59.873356+02:00 ubuntu sshd-session[36802]: Failed password for root from 89.38.247.73 port 45875 ssh2 2025-06-13T10:25:02.195761+02:00 ubuntu sshd-session[36802]: Failed password for root from 89.38.247.73 port 45875 ssh2 2025-06-13T10:25:04.183868+02:00 ubuntu sshd-session[36802]: Failed password for root from 89.38.247.73 port 45875 ssh2 ... show less	Brute-Force
trivox.sh	2025-06-13 05:26:34 (3 weeks ago)	Jun 13 05:26:24 honey3 sshd[2005802]: Failed password for root from 89.38.247.73 port 59974 ssh2<br ... show moreJun 13 05:26:24 honey3 sshd[2005802]: Failed password for root from 89.38.247.73 port 59974 ssh2 Jun 13 05:26:27 honey3 sshd[2005802]: Failed password for root from 89.38.247.73 port 59974 ssh2 Jun 13 05:26:29 honey3 sshd[2005802]: Failed password for root from 89.38.247.73 port 59974 ssh2 Jun 13 05:26:31 honey3 sshd[2005802]: Failed password for root from 89.38.247.73 port 59974 ssh2 Jun 13 05:26:33 honey3 sshd[2005802]: Failed password for root from 89.38.247.73 port 59974 ssh2 ... show less	Brute-Force SSH
Scan	2025-06-13 03:22:51 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
rtbh.com.tr	2025-06-13 00:07:06 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ThreatBook.io	2025-06-12 23:42:12 (3 weeks ago)	ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/89.38.247.73 ... show moreThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/89.38.247.73 2025-06-12 03:48:42 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps | grep '[Mm]iner'","ps -ef | grep '[Mm]iner'","ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","locate D877F783D5D3EF8Cs","echo Hi | cat -n"] show less	SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩