IP address


--89.248.171.23rnd.group-ib.com
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus XBL CBL
89.248.171.23 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-07-12 05:04:50.145000
Was present on blacklist at: 2025-05-31 05:03, 2025-06-07 05:04, 2025-06-14 05:05, 2025-06-21 05:05, 2025-06-28 05:10, 2025-07-05 05:05, 2025-07-12 05:04
DShield reports (IP summary, reports)
2025-05-30
Number of reports: 17
Distinct targets: 6
2025-06-11
Number of reports: 82
Distinct targets: 14
2025-06-12
Number of reports: 90
Distinct targets: 13
2025-06-13
Number of reports: 52
Distinct targets: 10
2025-06-14
Number of reports: 28
Distinct targets: 6
2025-06-15
Number of reports: 28
Distinct targets: 6
2025-06-16
Number of reports: 61
Distinct targets: 11
2025-06-17
Number of reports: 53
Distinct targets: 10
2025-06-18
Number of reports: 57
Distinct targets: 13
2025-06-19
Number of reports: 65
Distinct targets: 13
2025-06-20
Number of reports: 54
Distinct targets: 13
2025-06-21
Number of reports: 36
Distinct targets: 6
2025-06-22
Number of reports: 20
Distinct targets: 3
2025-06-23
Number of reports: 13
Distinct targets: 3
2025-06-25
Number of reports: 25
Distinct targets: 7
2025-06-26
Number of reports: 48
Distinct targets: 11
2025-06-27
Number of reports: 76
Distinct targets: 11
2025-06-28
Number of reports: 60
Distinct targets: 11
2025-06-29
Number of reports: 44
Distinct targets: 7
2025-06-30
Number of reports: 36
Distinct targets: 6
2025-07-01
Number of reports: 37
Distinct targets: 7
2025-07-02
Number of reports: 34
Distinct targets: 5
2025-07-03
Number of reports: 24
Distinct targets: 5
2025-07-04
Number of reports: 16
Distinct targets: 3
2025-07-05
Number of reports: 35
Distinct targets: 9
2025-07-06
Number of reports: 42
Distinct targets: 8
2025-07-07
Number of reports: 25
Distinct targets: 6
2025-07-08
Number of reports: 73
Distinct targets: 14
Origin AS
AS202425 - INT-NETWORK
BGP Prefix
89.248.171.0/24
geo
Netherlands
🕑 Europe/Amsterdam
hostname
rnd.group-ib.com
Address block ('inetnum' or 'NetRange' in whois database)
89.248.160.0 - 89.248.175.255
reserved_range
0
ts_added
2025-05-31 05:03:12.509000
ts_last_update
2025-07-15 05:09:07.803000

Warden event timeline

DShield event timeline

Presence on blacklists