89.42.209.26

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
180 reports
124 reporters ยท latest 34 minutes ago
ISP Netmihan Communication Company Ltd
Usage Type Data Center/Web Hosting/Transit
ASN AS204213
Domain Name netmihan.com
Country ๐Ÿ‡ฎ๐Ÿ‡ท Iran (Islamic Republic of)
City Tehran, Tehran

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 89.42.209.26

This IP address has been reported a total of 180 times from 124 distinct sources. 89.42.209.26 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 43 reports; United States of America with 38 reports; France with 21 reports. The most common categories in these recent reports were: Port Scan 96 times; Web App Attack 82 times; Hacking 54 times; Bad Web Bot 30 times; Brute-Force 30 times; Other 12 times.

Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Port Scan
๐Ÿ‡จ๐Ÿ‡ณ PrivateLiu
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช Jochen Pretli
connection to honeypot
Email Spam Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-28 01:42:04 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan Web App Attack
๐Ÿ‡ท๐Ÿ‡ธ Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
Anonymous
Web scanner: GET /.git/HEAD
Web App Attack Hacking
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ avgsmoe
Connection to a honeypot port. Automated report (firemon).
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช netclix.gr
Hacking
Anonymous
Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=2082,2083,2086,443,80,8080,8443
Port Scan Hacking
๐Ÿ‡ฆ๐Ÿ‡บ LiftUp Hosting
Honeypot hit: Empty payload (likely service probe); 2087 [1] TCP
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช pscriptos
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack Hacking
๐Ÿ‡ช๐Ÿ‡ธ Gem
Unauthorized web scan.
Web App Attack
๐Ÿ‡ธ๐Ÿ‡ช SkyDancer
Hacking Brute-Force SSH

Showing 1 to 15 of 180 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ฒ๐Ÿ‡ฝ 189.204.230.91
๐Ÿ‡ญ๐Ÿ‡ฐ 152.32.251.219
๐Ÿ‡ฎ๐Ÿ‡ท 85.198.19.242
๐Ÿ‡ญ๐Ÿ‡ฐ 219.77.169.219
๐Ÿ‡จ๐Ÿ‡ณ 203.189.196.168
๐Ÿ‡บ๐Ÿ‡ธ 192.253.209.27
๐Ÿ‡ฒ๐Ÿ‡ฝ 187.190.215.134
๐Ÿ‡ฐ๐Ÿ‡ท 175.196.78.7
๐Ÿ‡ฒ๐Ÿ‡ผ 168.253.224.242
๐Ÿ‡บ๐Ÿ‡ธ 152.32.207.197
๐Ÿ‡ซ๐Ÿ‡ท 151.80.133.111
๐Ÿ‡ป๐Ÿ‡ณ 123.58.198.35
๐Ÿ‡ป๐Ÿ‡ณ 103.154.63.62
๐Ÿ‡ธ๐Ÿ‡ฌ 94.231.206.204
๐Ÿ‡น๐Ÿ‡ท 94.154.45.137
๐Ÿ‡ง๐Ÿ‡ฌ 78.128.114.170
๐Ÿ‡บ๐Ÿ‡ธ 45.132.115.6
๐Ÿ‡ฌ๐Ÿ‡ง 35.203.210.109
๐Ÿ‡ซ๐Ÿ‡ท 185.194.178.37
๐Ÿ‡จ๐Ÿ‡ด 177.93.61.202