IP address

Passive DNS

Tags: Scanner

IP blacklists

CI Army

89.248.163.54 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-08-30 02:50:01.086000
Was present on blacklist at: 2025-07-22 02:50, 2025-07-23 02:50, 2025-07-24 02:50, 2025-07-25 02:50, 2025-07-26 02:50, 2025-07-27 02:50, 2025-07-28 02:50, 2025-07-29 02:50, 2025-07-30 02:50, 2025-07-31 02:50, 2025-08-01 02:50, 2025-08-02 02:50, 2025-08-03 02:50, 2025-08-04 02:50, 2025-08-05 02:50, 2025-08-06 02:50, 2025-08-07 02:50, 2025-08-08 02:50, 2025-08-09 02:50, 2025-08-10 02:50, 2025-08-11 02:50, 2025-08-12 02:50, 2025-08-13 02:50, 2025-08-14 02:50, 2025-08-15 02:50, 2025-08-16 02:50, 2025-08-17 02:50, 2025-08-18 02:50, 2025-08-19 02:50, 2025-08-20 02:50, 2025-08-21 02:50, 2025-08-22 02:50, 2025-08-24 02:50, 2025-08-25 02:50, 2025-08-26 02:50, 2025-08-27 02:50, 2025-08-28 02:50, 2025-08-29 02:50, 2025-08-30 02:50

AbuseIPDB

89.248.163.54 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-08-27 04:00:00.682000
Was present on blacklist at: 2025-07-22 04:00, 2025-07-25 04:00, 2025-07-30 04:00, 2025-08-02 04:00, 2025-08-03 04:00, 2025-08-04 04:00, 2025-08-05 04:00, 2025-08-06 04:00, 2025-08-07 04:00, 2025-08-10 04:00, 2025-08-14 04:00, 2025-08-15 04:00, 2025-08-20 04:00, 2025-08-23 04:00, 2025-08-27 04:00

Turris greylist

89.248.163.54 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-08-29 21:15:00.151000
Was present on blacklist at: 2025-07-23 21:15, 2025-07-24 21:15, 2025-07-26 21:15, 2025-07-28 21:15, 2025-07-29 21:15, 2025-07-30 21:15, 2025-07-31 21:15, 2025-08-01 21:15, 2025-08-03 21:15, 2025-08-04 21:15, 2025-08-05 21:15, 2025-08-06 21:15, 2025-08-07 21:15, 2025-08-09 21:15, 2025-08-11 21:15, 2025-08-12 21:15, 2025-08-14 21:15, 2025-08-15 21:15, 2025-08-16 21:15, 2025-08-18 21:15, 2025-08-19 21:15, 2025-08-20 21:15, 2025-08-23 21:15, 2025-08-25 21:15, 2025-08-26 21:15, 2025-08-28 21:15, 2025-08-29 21:15

Warden events (216)

2025-08-26: ReconScanning (node.f90c6b): 2
2025-08-22: ReconScanning (node.f90c6b): 1
2025-08-18: ReconScanning (node.f90c6b): 1
2025-08-13: ReconScanning (node.f90c6b): 1
2025-08-10: ReconScanning (node.f90c6b): 1
2025-08-06: ReconScanning (node.368407): 9; ReconScanning (node.4dc198): 3; AnomalyTraffic (node.ffe95c): 3; ReconScanning (node.9c1411): 1
2025-08-05: ReconScanning (node.368407): 8; AnomalyTraffic (node.ffe95c): 8; ReconScanning (node.4dc198): 3
2025-08-04: ReconScanning (node.368407): 14; AnomalyTraffic (node.ffe95c): 6; ReconScanning (node.4dc198): 6; ReconScanning (node.9c1411): 1
2025-08-03: ReconScanning (node.368407): 10; AnomalyTraffic (node.ffe95c): 5; ReconScanning (node.4dc198): 3; ReconScanning (node.9c1411): 1
2025-08-02: AnomalyTraffic (node.ffe95c): 10; ReconScanning (node.4dc198): 9; ReconScanning (node.368407): 9
2025-08-01: ReconScanning (node.4dc198): 4; ReconScanning (node.368407): 12; AnomalyTraffic (node.ffe95c): 2
2025-07-31: ReconScanning (node.368407): 7; AnomalyTraffic (node.ffe95c): 8; ReconScanning (node.4dc198): 6
2025-07-30: ReconScanning (node.368407): 8; ReconScanning (node.9c1411): 1
2025-07-29: AnomalyTraffic (node.ffe95c): 6; ReconScanning (node.4dc198): 10; ReconScanning (node.368407): 9
2025-07-28: ReconScanning (node.368407): 1; AnomalyTraffic (node.ffe95c): 2; ReconScanning (node.4dc198): 2
2025-07-26: ReconScanning (node.f90c6b): 1
2025-07-24: ReconScanning (node.368407): 11; AnomalyTraffic (node.ffe95c): 3; ReconScanning (node.4dc198): 7; ReconScanning (node.9c1411): 1

DShield reports (IP summary, reports)

2025-07-21: Number of reports: 2754; Distinct targets: 2227
2025-07-22: Number of reports: 6976; Distinct targets: 4244
2025-07-23: Number of reports: 8799; Distinct targets: 5192
2025-07-24: Number of reports: 5045; Distinct targets: 2701
2025-07-25: Number of reports: 6394; Distinct targets: 4180
2025-07-26: Number of reports: 8521; Distinct targets: 4013
2025-07-27: Number of reports: 7436; Distinct targets: 4831
2025-07-28: Number of reports: 6020; Distinct targets: 3292
2025-07-29: Number of reports: 7792; Distinct targets: 4826
2025-07-30: Number of reports: 2011; Distinct targets: 1150
2025-07-31: Number of reports: 2605; Distinct targets: 1698
2025-08-01: Number of reports: 5629; Distinct targets: 4307
2025-08-02: Number of reports: 5188; Distinct targets: 3410
2025-08-03: Number of reports: 6380; Distinct targets: 3938
2025-08-04: Number of reports: 4765; Distinct targets: 4126
2025-08-05: Number of reports: 2589; Distinct targets: 1681
2025-08-06: Number of reports: 4419; Distinct targets: 3806
2025-08-07: Number of reports: 6010; Distinct targets: 3397
2025-08-08: Number of reports: 5646; Distinct targets: 4495
2025-08-09: Number of reports: 5953; Distinct targets: 4839
2025-08-10: Number of reports: 5350; Distinct targets: 5300
2025-08-11: Number of reports: 9132; Distinct targets: 7583
2025-08-12: Number of reports: 7394; Distinct targets: 6623
2025-08-13: Number of reports: 9976; Distinct targets: 5322
2025-08-14: Number of reports: 10134; Distinct targets: 6816
2025-08-15: Number of reports: 5020; Distinct targets: 4611
2025-08-16: Number of reports: 1551; Distinct targets: 1308
2025-08-17: Number of reports: 2696; Distinct targets: 2327
2025-08-18: Number of reports: 2723; Distinct targets: 2535
2025-08-19: Number of reports: 6382; Distinct targets: 4819
2025-08-20: Number of reports: 2340; Distinct targets: 1317
2025-08-21: Number of reports: 3426; Distinct targets: 2381
2025-08-22: Number of reports: 12104; Distinct targets: 7132
2025-08-23: Number of reports: 3867; Distinct targets: 1932
2025-08-24: Number of reports: 1302; Distinct targets: 1293
2025-08-27: Number of reports: 5527; Distinct targets: 4769
2025-08-28: Number of reports: 12477; Distinct targets: 6666
2025-08-29: Number of reports: 7582; Distinct targets: 5138

Origin AS: AS202425 - INT-NETWORK; AS35539 - INFOLINK-T-AS
BGP Prefix: 89.248.163.0/24
geo: Netherlands; 🕑 Europe/Amsterdam
hostname: no-reverse-dns-configured.com
Address block ('inetnum' or 'NetRange' in whois database): 89.248.160.0 - 89.248.175.255
last_activity: 2025-08-26 23:51:12
last_warden_event: 2025-08-26 23:51:12
rep: 0.05476190476190476
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 80; Tags: eol-product, scanner; CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:f5:nginx:1.18.0, cpe:/o:linux:linux_kernel
ts_added: 2025-07-22 02:52:16.543000
ts_last_update: 2025-08-30 05:01:35.576000

Warden event timeline

DShield event timeline

Presence on blacklists