89.42.231.77

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
1,120 reports
199 reporters · latest 10 months ago
ISP
Amarutu Technology Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS206264
Domain Name
koddos.net
Country
🇳🇱 Netherlands
City
Oude Meer, North Holland
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

89.42.231.77 has been reported 1,120 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
1,120 from 199 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇮 nNordic
Connection attempt blocked by IDS/IPS from IP 89.42.231.77/32
Hacking
🇫🇮 nNordic
Connection attempt blocked by IDS/IPS from IP 89.42.231.77/32
Hacking
🇫🇮 nNordic
Connection attempt blocked by IDS/IPS from IP 89.42.231.77/32
Hacking
🇫🇮 nNordic
Connection attempt blocked by IDS/IPS from IP 89.42.231.77/32
Hacking
Anonymous
Unauthorized web access attempt detected
Web App Attack
🇺🇸 drewf.ink
[00:04] Port scanning. Port(s) scanned: TCP/83
Port Scan
🇺🇸 drewf.ink
[21:19] Port scanning. Port(s) scanned: TCP/10000
Port Scan
🇩🇪 Axel
[2025-12-01 21:11:29 UTC] Honeypot Webmin connection attempt | AXFRA HONEYPOT
Web App Attack
🇨🇦 Slackin' Jack
Triggered honeypot on port 10000. (89.42.231.77)
Port Scan
🇩🇪 Szymekk
Honeypot [srv06]: HTTP/1.1 request on 10000 GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd User-Agent: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) Accept-Encoding: gzip; 10000 [1] TCP
Hacking Bad Web Bot
🇸🇬 drewf.ink
[20:31] Port scanning. Port(s) scanned: TCP/10000
Port Scan
🇸🇬 primal
Detected 5 attacks from 89.42.231.77 (Unknown country) against GitLab honeypot. Targeted ports: 3000. Attack details: {"body":"","content_type":"","header":{"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent First seen: 2025-12-02 01:40:50
Web App Attack
🇯🇵 mkaraki
1764607553 # Service_probe # SIGNATURE_SEND # source_ip:89.42.231.77 # dst_port:9000 ...
Port Scan
🇫🇷 JPPO
Multiport scan 15 ports : 70 81 82 83 84 85 86 88 3000(x2) 3001 3002 3003 4000 4001 4357
Port Scan
🇬🇧 [email protected]
...
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.17.28.206
🇻🇳 210.245.30.140
🇺🇸 193.202.12.72
🇬🇧 193.163.125.126
🇨🇳 117.72.16.66
🇧🇪 35.206.131.8
🇷🇴 2.57.121.25
🇦🇷 200.81.189.216
🇧🇷 191.183.3.54
🇳🇱 141.98.80.122
🇯🇵 111.238.174.6
🇷🇴 92.118.39.14
🇸🇬 47.236.204.159
🇷🇴 2.57.121.112
🇳🇱 200.138.46.163
feedback