IP address

Search at other sites:
.89289.248.172.9
Shodan(more info)
Passive DNS
Tags:
IP blacklists
CI Army
89.248.172.9 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-08-19 02:50:00.802000
Was present on blacklist at: 2026-07-15 02:50, 2026-07-17 02:50, 2026-07-18 02:50, 2026-07-19 02:50, 2026-07-20 02:50, 2026-07-21 02:50, 2026-07-22 02:50, 2026-07-23 02:50, 2026-07-24 02:50, 2026-07-25 02:50, 2026-07-26 02:50, 2026-07-27 02:50, 2026-07-28 02:50, 2026-07-29 02:50, 2026-07-30 02:50, 2026-07-31 02:50, 2026-08-01 02:50, 2026-08-02 02:50, 2026-08-03 02:50, 2026-08-04 02:50, 2026-08-05 02:50, 2026-08-06 02:50, 2026-08-07 02:50, 2026-08-08 02:50, 2026-08-09 02:50, 2026-08-10 02:50, 2026-08-11 02:50, 2026-08-12 02:50, 2026-08-13 02:50, 2026-08-14 02:50, 2026-08-15 02:50, 2026-08-16 02:50, 2026-08-17 02:50, 2026-08-18 02:50, 2026-08-19 02:50
AbuseIPDB
89.248.172.9 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-08-19 04:00:00.592000
Was present on blacklist at: 2026-07-15 04:00, 2026-07-17 04:00, 2026-07-18 04:00, 2026-07-19 04:00, 2026-07-21 04:00, 2026-07-22 04:00, 2026-07-23 04:00, 2026-07-24 04:00, 2026-07-25 04:00, 2026-07-26 04:00, 2026-07-28 04:00, 2026-07-29 04:00, 2026-07-30 04:00, 2026-07-31 04:00, 2026-08-01 04:00, 2026-08-03 04:00, 2026-08-04 04:00, 2026-08-05 04:00, 2026-08-06 04:00, 2026-08-08 04:00, 2026-08-09 04:00, 2026-08-10 04:00, 2026-08-11 04:00, 2026-08-12 04:00, 2026-08-13 04:00, 2026-08-14 04:00, 2026-08-15 04:00, 2026-08-16 04:00, 2026-08-17 04:00, 2026-08-18 04:00, 2026-08-19 04:00
UCEPROTECT L1
89.248.172.9 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-08-18 23:45:00.512000
Was present on blacklist at: 2026-07-15 07:45, 2026-07-15 15:45, 2026-07-15 23:45, 2026-07-16 15:45, 2026-07-16 23:45, 2026-07-17 07:45, 2026-07-17 15:45, 2026-07-17 23:45, 2026-07-18 07:45, 2026-07-18 15:45, 2026-07-18 23:45, 2026-07-19 07:45, 2026-07-19 15:45, 2026-07-19 23:45, 2026-07-20 07:45, 2026-07-20 15:45, 2026-07-20 23:45, 2026-07-21 07:45, 2026-07-21 15:45, 2026-07-21 23:45, 2026-07-22 07:45, 2026-07-22 15:45, 2026-07-22 23:45, 2026-07-23 07:45, 2026-07-23 15:45, 2026-07-23 23:45, 2026-07-24 07:45, 2026-07-24 15:45, 2026-07-24 23:45, 2026-07-25 07:45, 2026-07-25 15:45, 2026-07-25 23:45, 2026-07-26 07:45, 2026-07-26 15:45, 2026-07-26 23:45, 2026-07-27 07:45, 2026-07-27 15:45, 2026-07-27 23:45, 2026-07-28 07:45, 2026-07-28 15:45, 2026-07-28 23:45, 2026-07-29 07:45, 2026-07-29 15:45, 2026-07-29 23:45, 2026-07-30 07:45, 2026-07-30 15:45, 2026-07-30 23:45, 2026-07-31 07:45, 2026-07-31 15:45, 2026-07-31 23:45, 2026-08-01 07:45, 2026-08-01 15:45, 2026-08-01 23:45, 2026-08-02 07:45, 2026-08-02 15:45, 2026-08-02 23:45, 2026-08-03 07:45, 2026-08-03 15:45, 2026-08-03 23:45, 2026-08-04 07:45, 2026-08-04 15:45, 2026-08-04 23:45, 2026-08-05 07:45, 2026-08-05 15:45, 2026-08-05 23:45, 2026-08-06 07:45, 2026-08-06 15:45, 2026-08-06 23:45, 2026-08-07 07:45, 2026-08-07 15:45, 2026-08-07 23:45, 2026-08-08 07:45, 2026-08-08 15:45, 2026-08-08 23:45, 2026-08-09 07:45, 2026-08-09 15:45, 2026-08-09 23:45, 2026-08-10 07:45, 2026-08-10 15:45, 2026-08-10 23:45, 2026-08-11 07:45, 2026-08-11 15:45, 2026-08-11 23:45, 2026-08-12 07:45, 2026-08-12 15:45, 2026-08-12 23:45, 2026-08-13 07:45, 2026-08-13 15:45, 2026-08-13 23:45, 2026-08-14 07:45, 2026-08-14 15:45, 2026-08-14 23:45, 2026-08-15 07:45, 2026-08-15 15:45, 2026-08-15 23:45, 2026-08-16 07:45, 2026-08-16 15:45, 2026-08-16 23:45, 2026-08-17 07:45, 2026-08-17 15:45, 2026-08-17 23:45, 2026-08-18 07:45, 2026-08-18 15:45, 2026-08-18 23:45
Echelon TLS/SSL crawler
89.248.172.9 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-08-18 09:40:00.457000
Was present on blacklist at: 2026-07-16 09:40, 2026-07-17 09:40, 2026-07-18 09:40, 2026-07-19 09:40, 2026-07-20 09:40, 2026-07-21 09:40, 2026-07-22 09:40, 2026-07-23 09:40, 2026-07-24 09:40, 2026-07-25 09:40, 2026-07-26 09:40, 2026-07-27 09:40, 2026-07-28 09:40, 2026-07-29 09:40, 2026-07-30 09:40, 2026-07-31 09:40, 2026-08-01 09:40, 2026-08-02 09:40, 2026-08-03 09:40, 2026-08-04 09:40, 2026-08-05 09:40, 2026-08-06 09:40, 2026-08-07 09:40, 2026-08-08 09:40, 2026-08-09 09:40, 2026-08-10 09:40, 2026-08-11 09:40, 2026-08-12 09:40, 2026-08-13 09:40, 2026-08-14 09:40, 2026-08-15 09:40, 2026-08-16 09:40, 2026-08-17 09:40, 2026-08-18 09:40
Echelon SSH connection attempt
89.248.172.9 is listed on the Echelon SSH connection attempt blacklist.

Description: SSH connection attempt detected on port 22 or 2222
Type of feed: primary (feed detail page)

Last checked at: 2026-08-18 09:35:00.593000
Was present on blacklist at: 2026-07-17 09:35, 2026-07-18 09:35, 2026-07-19 09:35, 2026-07-20 09:35, 2026-07-21 09:35, 2026-07-22 09:35, 2026-07-23 09:35, 2026-07-24 09:35, 2026-07-25 09:35, 2026-07-26 09:35, 2026-07-27 09:35, 2026-07-28 09:35, 2026-07-29 09:35, 2026-07-30 09:35, 2026-07-31 09:35, 2026-08-01 09:35, 2026-08-02 09:35, 2026-08-03 09:35, 2026-08-04 09:35, 2026-08-05 09:35, 2026-08-06 09:35, 2026-08-07 09:35, 2026-08-08 09:35, 2026-08-09 09:35, 2026-08-10 09:35, 2026-08-11 09:35, 2026-08-12 09:35, 2026-08-13 09:35, 2026-08-14 09:35, 2026-08-15 09:35, 2026-08-16 09:35, 2026-08-17 09:35, 2026-08-18 09:35
Echelon web crawler
89.248.172.9 is listed on the Echelon web crawler blacklist.

Description: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-08-15 09:50:00.427000
Was present on blacklist at: 2026-08-03 09:50, 2026-08-04 09:50, 2026-08-05 09:50, 2026-08-06 09:50, 2026-08-07 09:50, 2026-08-08 09:50, 2026-08-09 09:50, 2026-08-10 09:50, 2026-08-11 09:50, 2026-08-12 09:50, 2026-08-13 09:50, 2026-08-14 09:50, 2026-08-15 09:50

Threat categories

TLRoleCategoryDetails
82 src scan port: many
47 src —
37 src login protocol: ssh
port: 22, 2222
Warden events (6484)
2026-08-19
ReconScanning (node.4dc198): 14
ReconScanning (node.9c1411): 20
ReconScanning (node.ce2b59): 8
2026-08-18
ReconScanning (node.ce2b59): 30
ReconScanning (node.4dc198): 130
ReconScanning (node.9c1411): 61
2026-08-17
ReconScanning (node.368407): 10
ReconScanning (node.4dc198): 144
ReconScanning (node.9c1411): 66
ReconScanning (node.ce2b59): 29
2026-08-16
ReconScanning (node.9c1411): 69
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 5
ReconScanning (node.4dc198): 83
AttemptLogin (node.ee25b8): 1
2026-08-15
ReconScanning (node.ce2b59): 30
ReconScanning (node.9c1411): 58
ReconScanning (node.4dc198): 21
ReconScanning (node.368407): 13
2026-08-14
ReconScanning (node.4dc198): 4
ReconScanning (node.ce2b59): 30
ReconScanning (node.9c1411): 69
ReconScanning (node.368407): 7
AttemptLogin (node.b17ef8): 1
2026-08-13
ReconScanning (node.9c1411): 53
ReconScanning (node.ce2b59): 29
AttemptLogin (node.e47683): 1
ReconScanning (node.4dc198): 28
ReconScanning (node.368407): 4
2026-08-12
ReconScanning (node.4dc198): 101
ReconScanning (node.ce2b59): 30
ReconScanning (node.9c1411): 60
ReconScanning (node.368407): 9
2026-08-11
ReconScanning (node.9c1411): 65
ReconScanning (node.4dc198): 170
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 7
2026-08-10
ReconScanning (node.4dc198): 184
ReconScanning (node.ce2b59): 29
ReconScanning (node.368407): 6
ReconScanning (node.9c1411): 33
AttemptLogin (node.9c160c): 2
2026-08-09
ReconScanning (node.4dc198): 47
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 6
2026-08-08
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 7
ReconScanning (node.4dc198): 34
2026-08-07
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 6
ReconScanning (node.4dc198): 14
2026-08-06
ReconScanning (node.ce2b59): 30
ReconScanning (node.9c1411): 6
ReconScanning (node.368407): 6
AttemptLogin (node.d2ecc6): 1
ReconScanning (node.4dc198): 10
AttemptLogin (node.70e749): 1
2026-08-05
ReconScanning (node.ce2b59): 31
ReconScanning (node.9c1411): 59
ReconScanning (node.4dc198): 18
ReconScanning (node.368407): 2
2026-08-04
ReconScanning (node.4dc198): 26
ReconScanning (node.9c1411): 59
ReconScanning (node.368407): 8
ReconScanning (node.ce2b59): 30
2026-08-03
ReconScanning (node.9c1411): 65
ReconScanning (node.ce2b59): 29
ReconScanning (node.4dc198): 130
ReconScanning (node.368407): 13
2026-08-02
ReconScanning (node.4dc198): 111
ReconScanning (node.9c1411): 54
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 6
2026-08-01
ReconScanning (node.4dc198): 124
ReconScanning (node.ce2b59): 30
ReconScanning (node.9c1411): 57
ReconScanning (node.368407): 4
2026-07-31
ReconScanning (node.9c1411): 79
ReconScanning (node.ce2b59): 30
ReconScanning (node.4dc198): 13
ReconScanning (node.368407): 4
2026-07-30
ReconScanning (node.9c1411): 74
ReconScanning (node.ce2b59): 29
ReconScanning (node.368407): 8
2026-07-29
ReconScanning (node.4dc198): 87
ReconScanning (node.ce2b59): 30
ReconScanning (node.9c1411): 75
ReconScanning (node.368407): 2
2026-07-28
ReconScanning (node.9c1411): 66
ReconScanning (node.ce2b59): 30
AttemptLogin (node.e47683): 2
ReconScanning (node.4dc198): 136
ReconScanning (node.368407): 4
2026-07-27
ReconScanning (node.ce2b59): 30
ReconScanning (node.9c1411): 65
ReconScanning (node.4dc198): 89
ReconScanning (node.368407): 5
2026-07-26
ReconScanning (node.9c1411): 71
ReconScanning (node.ce2b59): 30
ReconScanning (node.4dc198): 134
ReconScanning (node.368407): 2
2026-07-25
ReconScanning (node.368407): 10
ReconScanning (node.ce2b59): 30
ReconScanning (node.9c1411): 71
AttemptLogin (node.d2ecc6): 1
2026-07-24
ReconScanning (node.9c1411): 73
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 3
AttemptLogin (node.9c160c): 1
ReconScanning (node.4dc198): 3
AttemptLogin (node.e47683): 1
2026-07-23
ReconScanning (node.9c1411): 75
ReconScanning (node.ce2b59): 30
AttemptLogin (node.ee25b8): 1
ReconScanning (node.368407): 4
2026-07-22
ReconScanning (node.4dc198): 154
ReconScanning (node.9c1411): 64
ReconScanning (node.ce2b59): 30
ReconScanning (node.368407): 5
2026-07-21
ReconScanning (node.4dc198): 122
ReconScanning (node.ce2b59): 31
ReconScanning (node.9c1411): 73
ReconScanning (node.368407): 12
2026-07-20
ReconScanning (node.4dc198): 278
ReconScanning (node.9c1411): 64
ReconScanning (node.368407): 12
ReconScanning (node.ce2b59): 29
2026-07-19
ReconScanning (node.4dc198): 227
ReconScanning (node.9c1411): 53
ReconScanning (node.368407): 7
ReconScanning (node.ce2b59): 30
AttemptLogin (node.b17ef8): 1
2026-07-18
ReconScanning (node.9c1411): 61
ReconScanning (node.ce2b59): 30
ReconScanning (node.4dc198): 170
ReconScanning (node.368407): 4
2026-07-17
ReconScanning (node.9c1411): 65
ReconScanning (node.ce2b59): 31
ReconScanning (node.368407): 14
2026-07-16
ReconScanning (node.9c1411): 72
ReconScanning (node.368407): 10
ReconScanning (node.ce2b59): 29
2026-07-15
ReconScanning (node.9c1411): 76
ReconScanning (node.ce2b59): 36
ReconScanning (node.368407): 16
ReconScanning (node.4dc198): 110
2026-07-14
ReconScanning (node.ce2b59): 56
ReconScanning (node.9c1411): 44
ReconScanning (node.368407): 10
ReconScanning (node.4dc198): 111
AttemptLogin (node.d2ecc6): 1
DShield reports (IP summary, reports)
2026-07-14
Number of reports: 193
Distinct targets: 153
2026-07-15
Number of reports: 193
Distinct targets: 153
2026-07-16
Number of reports: 349
Distinct targets: 272
2026-07-17
Number of reports: 319
Distinct targets: 224
2026-07-18
Number of reports: 319
Distinct targets: 224
2026-07-19
Number of reports: 358
Distinct targets: 269
2026-07-20
Number of reports: 361
Distinct targets: 238
2026-07-21
Number of reports: 355
Distinct targets: 261
2026-07-22
Number of reports: 355
Distinct targets: 261
2026-07-23
Number of reports: 406
Distinct targets: 284
2026-07-24
Number of reports: 355
Distinct targets: 246
2026-07-25
Number of reports: 358
Distinct targets: 243
2026-07-26
Number of reports: 328
Distinct targets: 239
2026-07-27
Number of reports: 328
Distinct targets: 239
2026-07-28
Number of reports: 376
Distinct targets: 262
2026-07-29
Number of reports: 376
Distinct targets: 262
2026-07-30
Number of reports: 281
Distinct targets: 192
2026-07-31
Number of reports: 324
Distinct targets: 214
2026-08-01
Number of reports: 324
Distinct targets: 214
2026-08-02
Number of reports: 391
Distinct targets: 270
2026-08-03
Number of reports: 314
Distinct targets: 221
2026-08-04
Number of reports: 347
Distinct targets: 256
2026-08-05
Number of reports: 285
Distinct targets: 211
2026-08-06
Number of reports: 351
Distinct targets: 246
2026-08-07
Number of reports: 351
Distinct targets: 246
2026-08-08
Number of reports: 355
Distinct targets: 259
2026-08-09
Number of reports: 354
Distinct targets: 254
2026-08-10
Number of reports: 354
Distinct targets: 254
2026-08-11
Number of reports: 318
Distinct targets: 228
2026-08-12
Number of reports: 390
Distinct targets: 278
2026-08-13
Number of reports: 189
Distinct targets: 175
2026-08-14
Number of reports: 355
Distinct targets: 259
2026-08-15
Number of reports: 355
Distinct targets: 259
2026-08-16
Number of reports: 324
Distinct targets: 235
2026-08-17
Number of reports: 250
Distinct targets: 214
2026-08-18
Number of reports: 375
Distinct targets: 263
OTX pulses
[6a578ef4ac776ac521e7f84d] 2026-07-15 13:45:24.913000 | RDP honeypot logs for 2026/07/15
Author name:jnazario
Pulse modified:2026-07-15 13:45:24.913000
Indicator created:2026-07-15 13:45:25
Indicator role:bruteforce
Indicator title:
Indicator expiration:2026-08-14 00:00:00
[6a577b0cea4d68fc6138b25a] 2026-07-15 12:20:28.623000 | RDP honeypot logs for 2026/07/15
Author name:jnazario
Pulse modified:2026-07-15 12:20:28.623000
Indicator created:2026-07-15 12:20:29
Indicator role:None
Indicator title:
Indicator expiration:2026-08-14 12:00:00
Origin AS
AS202425 - INT-NETWORK
BGP Prefix
89.248.172.0/24
geo
Netherlands, Utrecht
🕑 Europe/Amsterdam
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
89.248.160.0 - 89.248.175.255
last_activity
2026-08-19 06:33:06
last_warden_event
2026-08-19 06:33:06
rep
0.8920292402463352
reserved_range
0
ts_added
2026-07-14 07:10:30.944000
ts_last_update
2026-08-19 06:34:49.204000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses