Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
89.248.168.227 has a threat confidence score of 91%. This IP address from The Netherlands (AS202425, IP Volume inc) has been observed in 177 honeypot sessions and reported 19 times targeting HTTPS, HTTP, SSH, ELASTICSEARCH, TELNET and 1 other protocols. First observed on March 3, 2026, most recently active March 29, 2026.
Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.
Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration
Identifies HTTP GET requests directly targeting the /bad-request path, indicating automated or manual probing of application error-handling routes rather than legitimate navigation flow.
| Reporter | Date | Category | Protocol | Comment |
|---|---|---|---|---|
| User | Mar 22, 2026, 01:28 | Brute Force | FTP | SikkerGuard: 2 blocked packets |
| User | Mar 22, 2026, 24:12 | Brute Force | TELNET | SikkerGuard: 2 blocked packets |
| User | Mar 19, 2026, 18:08 | Brute Force | SSH | SikkerGuard: 2 blocked packets |
| User | Mar 19, 2026, 17:13 | Brute Force | SSH | SikkerGuard: 2 blocked packets |
| User | Mar 19, 2026, 16:52 | Brute Force | HTTP | SikkerGuard: 2 blocked packets |