IP address

Passive DNS

Tags: Scanner

IP blacklists

DShield Block

89.248.163.113 was recently listed on the DShield Block blacklist, but currently it is not.

Description: Recommended Block List by DShield.org. It summarizes the top 20 attacking<br>class C (/24) subnets over the last three days.
Type of feed: secondary (feed detail page)

Last checked at: 2023-09-22 04:50:00
Was present on blacklist at: 2023-06-25 04:50, 2023-07-03 04:50, 2023-07-06 04:50, 2023-07-09 04:50, 2023-07-10 04:50, 2023-07-11 04:50, 2023-07-12 04:50, 2023-07-18 04:50, 2023-07-20 04:50, 2023-07-24 04:50, 2023-08-03 04:50, 2023-08-22 04:50, 2023-08-23 04:50, 2023-08-24 04:50, 2023-08-25 04:50, 2023-08-27 04:50, 2023-08-30 04:50, 2023-08-31 04:50, 2023-09-01 04:50, 2023-09-02 04:50, 2023-09-03 04:50, 2023-09-07 04:50, 2023-09-09 04:50, 2023-09-12 04:50, 2023-09-13 04:50, 2023-09-15 04:50, 2023-09-17 04:50, 2023-09-18 04:50, 2023-09-20 04:50, 2023-09-21 04:50

Turris greylist

89.248.163.113 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2023-09-20 21:15:00.170000
Was present on blacklist at: 2023-06-25 21:15, 2023-07-11 21:15, 2023-07-30 21:15, 2023-08-05 21:15, 2023-08-11 21:15, 2023-08-14 21:15, 2023-08-31 21:15, 2023-09-01 21:15, 2023-09-03 21:15, 2023-09-06 21:15, 2023-09-07 21:15, 2023-09-09 21:15, 2023-09-11 21:15, 2023-09-12 21:15, 2023-09-14 21:15, 2023-09-16 21:15, 2023-09-17 21:15, 2023-09-18 21:15, 2023-09-20 21:15

Blacklists.co RDP

89.248.163.113 is listed on the Blacklists.co RDP blacklist.

Description: Blacklists.co blocklist contains RDP Malicious Addresses.
Type of feed: primary (feed detail page)

Last checked at: 2023-09-22 05:05:00.697000
Was present on blacklist at: 2023-08-30 05:05, 2023-08-31 05:05, 2023-09-01 05:05, 2023-09-02 05:05, 2023-09-03 05:05, 2023-09-04 05:05, 2023-09-05 05:05, 2023-09-06 05:05, 2023-09-07 05:05, 2023-09-08 05:05, 2023-09-09 05:05, 2023-09-10 05:05, 2023-09-11 05:05, 2023-09-12 05:05, 2023-09-13 05:05, 2023-09-14 05:05, 2023-09-15 05:05, 2023-09-16 05:05, 2023-09-17 05:05, 2023-09-18 05:05, 2023-09-19 05:05, 2023-09-20 05:05, 2023-09-21 05:05, 2023-09-22 05:05

Blacklists.co MYSQL

89.248.163.113 is listed on the Blacklists.co MYSQL blacklist.

Description: Blacklists.co blocklist contains MYSQL Malicious Addresses.
Type of feed: primary (feed detail page)

Last checked at: 2023-09-22 05:05:00.555000
Was present on blacklist at: 2023-08-31 05:05, 2023-09-01 05:05, 2023-09-02 05:05, 2023-09-03 05:05, 2023-09-04 05:05, 2023-09-05 05:05, 2023-09-06 05:05, 2023-09-07 05:05, 2023-09-08 05:05, 2023-09-09 05:05, 2023-09-10 05:05, 2023-09-11 05:05, 2023-09-12 05:05, 2023-09-13 05:05, 2023-09-14 05:05, 2023-09-15 05:05, 2023-09-16 05:05, 2023-09-17 05:05, 2023-09-18 05:05, 2023-09-19 05:05, 2023-09-20 05:05, 2023-09-21 05:05, 2023-09-22 05:05

Warden events (395)

2023-09-21: AnomalyTraffic (node.c35ced): 7; AvailabilityDoS (node.bd32ad): 1; ReconScanning (node.1e6360): 23; ReconScanning (node.bd32ad): 5; ReconScanning (node.4994c4): 1; ReconScanning (node.8cbf96): 3
2023-09-20: AnomalyTraffic (node.c35ced): 9; ReconScanning (node.1e6360): 176; ReconScanning (node.bd32ad): 3; AvailabilityDoS (node.bd32ad): 2
2023-09-19: ReconScanning (node.1e6360): 2; ReconScanning (node.8cbf96): 6; ReconScanning (node.bd32ad): 2; AnomalyTraffic (node.c35ced): 2; ReconScanning (node.32f23f): 1; ReconScanning (node.4994c4): 7
2023-09-15: ReconScanning (node.8cbf96): 2; ReconScanning (node.bd32ad): 1
2023-09-13: ReconScanning (node.bd32ad): 5; AnomalyTraffic (node.c35ced): 3; ReconScanning (node.8cbf96): 11
2023-09-11: ReconScanning (node.bd32ad): 2; AnomalyTraffic (node.c35ced): 2; ReconScanning (node.8cbf96): 4
2023-09-10: AnomalyTraffic (node.c35ced): 3; ReconScanning (node.bd32ad): 5; ReconScanning (node.8cbf96): 12
2023-09-08: ReconScanning (node.8cbf96): 6; ReconScanning (node.bd32ad): 2; AnomalyTraffic (node.c35ced): 2
2023-09-07: ReconScanning (node.1e6360): 1
2023-09-04: AnomalyTraffic (node.c35ced): 2; ReconScanning (node.bd32ad): 2; ReconScanning (node.8cbf96): 3
2023-08-31: ReconScanning (node.8cbf96): 3; ReconScanning (node.bd32ad): 3; AvailabilityDoS (node.bd32ad): 3; AnomalyTraffic (node.c35ced): 5; ReconScanning (node.1e6360): 23; ReconScanning (node.4994c4): 1
2023-08-30: ReconScanning (node.8cbf96): 6; AnomalyTraffic (node.c35ced): 3; ReconScanning (node.7d83c0): 1; ReconScanning (node.bd32ad): 2; ReconScanning (node.1e6360): 2; ReconScanning (node.4994c4): 8
2023-08-29: ReconScanning (node.bd32ad): 4; AnomalyTraffic (node.c35ced): 4; ReconScanning (node.8cbf96): 8; ReconScanning (node.7d83c0): 1

DShield reports (IP summary, reports)

2023-06-24: Number of reports: 8435; Distinct targets: 8435
2023-06-25: Number of reports: 8660; Distinct targets: 8660
2023-06-26: Number of reports: 8012; Distinct targets: 8012
2023-06-27: Number of reports: 15065; Distinct targets: 15065
2023-06-28: Number of reports: 14613; Distinct targets: 14613
2023-06-29: Number of reports: 12697; Distinct targets: 12697
2023-06-30: Number of reports: 13018; Distinct targets: 13018
2023-07-01: Number of reports: 13801; Distinct targets: 13801
2023-07-02: Number of reports: 14009; Distinct targets: 14009
2023-07-03: Number of reports: 14496; Distinct targets: 14496
2023-07-04: Number of reports: 14981; Distinct targets: 14981
2023-07-05: Number of reports: 6741; Distinct targets: 6740
2023-07-06: Number of reports: 998; Distinct targets: 992
2023-07-08: Number of reports: 1496; Distinct targets: 1496
2023-07-09: Number of reports: 9214; Distinct targets: 9214
2023-07-10: Number of reports: 9227; Distinct targets: 9218
2023-07-11: Number of reports: 10809; Distinct targets: 10809
2023-07-12: Number of reports: 11140; Distinct targets: 11140
2023-07-13: Number of reports: 11140; Distinct targets: 11140
2023-07-14: Number of reports: 11089; Distinct targets: 11089
2023-07-15: Number of reports: 10052; Distinct targets: 10052
2023-07-16: Number of reports: 9901; Distinct targets: 9901
2023-07-17: Number of reports: 9045; Distinct targets: 9043
2023-07-18: Number of reports: 9274; Distinct targets: 9273
2023-07-19: Number of reports: 7540; Distinct targets: 7540
2023-07-20: Number of reports: 640; Distinct targets: 638
2023-07-21: Number of reports: 2493; Distinct targets: 2492
2023-07-22: Number of reports: 10010; Distinct targets: 10010
2023-07-23: Number of reports: 10449; Distinct targets: 10449
2023-07-24: Number of reports: 10725; Distinct targets: 10681
2023-07-25: Number of reports: 10247; Distinct targets: 10247
2023-07-26: Number of reports: 10124; Distinct targets: 10124
2023-07-27: Number of reports: 10320; Distinct targets: 10320
2023-07-28: Number of reports: 10302; Distinct targets: 10302
2023-07-29: Number of reports: 10170; Distinct targets: 10170
2023-07-30: Number of reports: 10293; Distinct targets: 10293
2023-07-31: Number of reports: 10796; Distinct targets: 10796
2023-08-01: Number of reports: 8456; Distinct targets: 8456
2023-08-03: Number of reports: 4556; Distinct targets: 4547
2023-08-04: Number of reports: 5642; Distinct targets: 5622
2023-08-05: Number of reports: 4768; Distinct targets: 4768
2023-08-06: Number of reports: 4545; Distinct targets: 4540
2023-08-07: Number of reports: 2914; Distinct targets: 2913
2023-08-08: Number of reports: 4576; Distinct targets: 4570
2023-08-09: Number of reports: 4548; Distinct targets: 4547
2023-08-10: Number of reports: 3508; Distinct targets: 3508
2023-08-11: Number of reports: 2863; Distinct targets: 2862
2023-08-12: Number of reports: 2959; Distinct targets: 2856
2023-08-13: Number of reports: 813; Distinct targets: 813
2023-08-14: Number of reports: 3851; Distinct targets: 3500
2023-08-17: Number of reports: 567; Distinct targets: 491
2023-08-18: Number of reports: 196; Distinct targets: 109
2023-08-19: Number of reports: 14; Distinct targets: 8
2023-08-28: Number of reports: 2674; Distinct targets: 2671
2023-08-29: Number of reports: 9096; Distinct targets: 6939
2023-08-30: Number of reports: 8151; Distinct targets: 5321
2023-08-31: Number of reports: 8354; Distinct targets: 5408
2023-09-02: Number of reports: 10538; Distinct targets: 8827
2023-09-03: Number of reports: 10000; Distinct targets: 5000
2023-09-04: Number of reports: 20161; Distinct targets: 10090
2023-09-05: Number of reports: 10475; Distinct targets: 9700
2023-09-06: Number of reports: 17932; Distinct targets: 13921
2023-09-07: Number of reports: 6831; Distinct targets: 5763
2023-09-08: Number of reports: 1329; Distinct targets: 1275
2023-09-09: Number of reports: 45290; Distinct targets: 34951
2023-09-10: Number of reports: 8784; Distinct targets: 5913
2023-09-11: Number of reports: 5620; Distinct targets: 3193
2023-09-12: Number of reports: 2971; Distinct targets: 2953
2023-09-13: Number of reports: 2511; Distinct targets: 1534
2023-09-14: Number of reports: 6140; Distinct targets: 5282
2023-09-15: Number of reports: 8768; Distinct targets: 4395
2023-09-16: Number of reports: 2071; Distinct targets: 1555
2023-09-17: Number of reports: 48285; Distinct targets: 37038
2023-09-18: Number of reports: 350; Distinct targets: 350
2023-09-19: Number of reports: 1716; Distinct targets: 1327
2023-09-20: Number of reports: 3668; Distinct targets: 2415
2023-09-21: Number of reports: 5170; Distinct targets: 3607

OTX pulses

[606d75c11c08ff94089a9430] 2021-04-07 09:05:05.353000 | Georgs Honeypot

Author name:	georgengelmann
Pulse modified:	2023-09-22 15:59:02.618000
Indicator created:	2023-09-21 22:10:03
Indicator role:	trojan
Indicator title:	ServeMe Trojan from no-reverse-dns-configured.com port 54179
Indicator expiration:	2023-10-21 22:00:00

Origin AS: AS202425 - INT-NETWORK; AS35539 - INFOLINK-T-AS
BGP Prefix: 89.248.163.0/24
fmp: {'general': 0.5147958397865295}
geo: Netherlands, Amsterdam; 🕑 Europe/Amsterdam
hostname: no-reverse-dns-configured.com
Address block ('inetnum' or 'NetRange' in whois database): 89.248.160.0 - 89.248.175.255
last_activity: 2023-09-22 16:00:42.130000
last_warden_event: 2023-09-21 20:49:49
rep: 0.45005095955871405
reserved_range: 0
ts_added: 2023-05-28 05:05:57.524000
ts_last_update: 2023-09-22 16:00:42.157000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses