JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

89.39.161.172

Recent Activity

Abuse confidence score ?

100% Critical

53 reports

44 reporters · latest 4 hours ago

ISP	G-Core Labs Customer assignment
Usage Type	Data Center/Web Hosting/Transit
ASN	AS199524
Domain Name	gcore.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 89.39.161.172

Export CSV

This IP address has been reported a total of 53 times from 44 distinct sources. 89.39.161.172 was first reported on October 19th 2026, and the most recent report was 4 hours ago. In the last 60 days, the top reporter locations were: Germany with 11 reports; Brazil with 9 reports; United States of America with 7 reports. The most common categories in these recent reports were: Port Scan 48 times; Hacking 9 times; Brute-Force 6 times; DDoS Attack 2 times; SSH 1 time; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-10-20 23:36:34 (4 hours ago)	9 incidents: port scanning. Ports: 11358/UDP(1), 39056/UDP(1), 40469/UDP(1). First: 2026-10-19 18:51 ... show more 9 incidents: port scanning. Ports: 11358/UDP(1), 39056/UDP(1), 40469/UDP(1). First: 2026-10-19 18:51, Last: 2026-10-20 19:36 UTC. Triggers: ufw-repeater,firewall-udp,non-public-port,unknown,non-public-port,firewall-udp. show less	Port Scan
🇩🇪 phil2k	2026-10-20 17:22:20 (10 hours ago)	portscan on multiple UDP ports : Firewall: Within 2026-10-20 00:51:41 - 2026-10-20 04:19:09 CEST(+02 ... show more portscan on multiple UDP ports : Firewall: Within 2026-10-20 00:51:41 - 2026-10-20 04:19:09 CEST(+0200) identified: port scan from 89.39.161.172/32 on uncommon port/s: 20464(udp:20464),9268(udp:9268),37158(udp:37158) (3 trials) Fail2ban: Within 2026-10-20 00:51:41 - 2026-10-20 04:19:09 CEST(+0200) banned: 5 times by fail2ban[firewall]; 5 times by fail2ban[recidive] show less	Port Scan
🇧🇷 cibersecoptidata	2026-10-20 03:12:46 (1 day ago)	Port scan / Unsolicited traffic.	Port Scan
🇧🇷 diego	2026-10-20 03:09:35 (1 day ago)	[rede-164-29] Port Scan detected from 89.39.161.172 (BR/Brazil/-). 11 hits in the last 271 seconds ... show more [rede-164-29] Port Scan detected from 89.39.161.172 (BR/Brazil/-). 11 hits in the last 271 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Oct 20 00:08:36 kernel: [10092448.422750] Firewall: UDP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=89.39.161.172 DST=0.0.0.x LEN=37 TOS=0x00 PREC=0xA0 TTL=61 ID=30768 PROTO=UDP SPT=27015 DPT=55115 LEN=17 Oct 20 00:08:41 kernel: [10092453.103586] Firewall: UDP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=89.39.161.172 DST=0.0.0.x LEN=37 TOS=0x00 PREC=0xA0 TTL=61 ID=59097 PROTO=UDP SPT=27015 DPT=63658 LEN=17 Oct 20 00:08:5 show less	Port Scan
🇳🇱 36max	2026-10-20 02:26:02 (1 day ago)	Blocked by firewall: 5 unsolicited inbound connection attempts within 24 hours to ports 15279, 63219 ... show more Blocked by firewall: 5 unsolicited inbound connection attempts within 24 hours to ports 15279, 63219, 21692, 53460, 33553. Automated report from a home network. show less	Port Scan
Anonymous	2026-10-20 02:20:24 (1 day ago)	Repeated unauthorized connection attempts to restricted service observed.	Port Scan Hacking Bad Web Bot Web App Attack
🇮🇹 Fusty	2026-10-20 02:20:20 (1 day ago)	Unauthorized attempt on (UDP on port 30854). Source port: 27015 TTL: 56 Packet length: 75 55 Timesta ... show more Unauthorized attempt on (UDP on port 30854). Source port: 27015 TTL: 56 Packet length: 75 55 Timestamp: 2026-10-20 04:20:20 show less	Port Scan
🇮🇪 wiredalter	2026-10-20 02:19:48 (1 day ago)	Blocked by UFW on vhVPS [49355/tcp] Source Port: 27015 TTL: 50 Packet Length: 55 TOS: 0x00 Analyzed ... show more Blocked by UFW on vhVPS [49355/tcp] Source Port: 27015 TTL: 50 Packet Length: 55 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇨🇿 lp	2026-10-20 02:19:18 (1 day ago)	anomaly: udp_src_session, 2201 > threshold 2200, repeats 3176 times	Port Scan
🇩🇪 Admins@FBN	2026-10-20 02:19:04 (1 day ago)	FW-PortScan: Traffic Blocked srcport=27015 dstport=22815	Port Scan
🇫🇷 EDSL	2026-10-20 02:18:51 (1 day ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇧🇷 diego	2026-10-20 02:16:52 (1 day ago)	[rede-164-29] Port Scan detected from 89.39.161.172 (BR/Brazil/-). 11 hits in the last 246 seconds ... show more [rede-164-29] Port Scan detected from 89.39.161.172 (BR/Brazil/-). 11 hits in the last 246 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Oct 19 23:12:55 kernel: [10088782.225672] Firewall: UDP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=89.39.161.172 DST=0.0.0.x LEN=75 TOS=0x00 PREC=0xA0 TTL=61 ID=28354 PROTO=UDP SPT=27015 DPT=56211 LEN=55 Oct 19 23:13:30 kernel: [10088816.869358] Firewall: UDP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=89.39.161.172 DST=0.0.0.x LEN=75 TOS=0x00 PREC=0xA0 TTL=61 ID=19521 PROTO=UDP SPT=27015 DPT=29912 LEN=55 Oct 19 23:14:5 show less	Port Scan
🇧🇷 diego	2026-10-20 01:53:46 (1 day ago)	[rede-164-29] Port Scan detected from 89.39.161.172 (BR/Brazil/-). 11 hits in the last 295 seconds ... show more [rede-164-29] Port Scan detected from 89.39.161.172 (BR/Brazil/-). 11 hits in the last 295 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Oct 19 22:50:53 kernel: [24072384.667546] Firewall: UDP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=89.39.161.172 DST=0.0.0.x LEN=74 TOS=0x00 PREC=0xA0 TTL=59 ID=51577 PROTO=UDP SPT=27015 DPT=31499 LEN=54 Oct 19 22:50:57 kernel: [24072388.011628] Firewall: UDP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=89.39.161.172 DST=0.0.0.x LEN=75 TOS=0x00 PREC=0xA0 TTL=59 ID=4092 PROTO=UDP SPT=27015 DPT=42458 LEN=55 Oct 19 22:51:33 show less	Port Scan
🇺🇸 anon333	2026-10-20 01:34:24 (1 day ago)	Hacker syslog review 1792460063	Hacking
🇮🇳 Mr.Singh	2026-10-20 00:30:44 (1 day ago)	NFT blocked 89.39.161.172 after 2 rejections on 20-Oct-2026.	Port Scan Brute-Force

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.93

🇺🇸 192.101.67.41

🇵🇪 190.232.161.15

🇭🇰 188.255.140.145

🇬🇧 185.216.145.179

🇺🇸 167.71.23.66

🇺🇸 147.185.132.76

🇻🇳 116.99.253.90

🇫🇮 95.216.152.50

🇫🇷 85.217.140.24

🇺🇸 46.18.90.240

🇦🇷 45.191.80.138

🇨🇳 43.139.248.128

🇨🇦 35.203.22.103

🇬🇧 216.226.76.10

🇯🇲 216.10.214.133

🇻🇪 190.142.14.229

🇲🇽 187.246.31.37

🇦🇷 181.44.130.237

🇺🇸 161.35.120.200