89.31.120.238

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
621 reports
253 reporters ยท latest 3 hours ago
ISP EDIS Infrastructure in UAE
Usage Type Data Center/Web Hosting/Transit
ASN AS9009
Hostname(s) 238.120.31.89.in-addr.arpa
Domain Name edis.at
Country ๐Ÿ‡ฆ๐Ÿ‡ช United Arab Emirates
City Dubai, Dubai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 89.31.120.238

This IP address has been reported a total of 621 times from 253 distinct sources. 89.31.120.238 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 40 reports; Germany with 14 reports; France with 14 reports. The most common categories in these recent reports were: Port Scan 71 times; Hacking 32 times; Brute-Force 28 times; Web App Attack 19 times; SSH 10 times; Other 27 times.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ณ๐Ÿ‡ฑ ByeByte API
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ ByeByte API
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ ByeByte API
Port Scan
๐Ÿ‡ง๐Ÿ‡ท NOCVIU
Port Scan Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท aki
PortScan: TCP/995
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ VMHeaven.io
Blocked by UFW [41337/tcp] Source port: 57069 TTL: 244 Packet length: 44
Port Scan
๐Ÿ‡ง๐Ÿ‡ท diego
[rede-164-29] 10/25/2026-11:22:32.091642, 89.31.120.238, Protocol: 6, POSSBL SCAN SHELL M-SPLOIT TCP
Hacking
๐Ÿ‡ท๐Ÿ‡บ alexanderkarpau
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท agroman93
T-Pot honeypot: 10904 hits on ports [80, 81, 104, 161, 389, 873, 1025, 1515, 2087, 3128] (automated)
Port Scan Brute-Force Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท agroman93
T-Pot honeypot: 4740 hits on ports [15, 26, 49, 79, 81, 82, 83, 440, 2121, 5234] (automated)
Port Scan
๐Ÿ‡ฌ๐Ÿ‡ง andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
๐Ÿ‡ท๐Ÿ‡บ Agrohim
Gate I blocked for categories:
DDoS Attack Ping of Death Port Scan Hacking Brute-Force
๐Ÿ‡จ๐Ÿ‡ญ chilibi.ch
2026-10-10 10:23:37 bul SSH
Brute-Force SSH
๐Ÿ‡ฉ๐Ÿ‡ช horax
Oct 10 12:07:23 RP2 sshd[1412722]: Connection closed by 89.31.120.238 port 36138 [preauth] ...
Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ท pawel
Brute-Force

Showing 1 to 15 of 621 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ซ๐Ÿ‡ท 166.0.132.222
๐Ÿ‡บ๐Ÿ‡ธ 137.22.233.17
๐Ÿ‡ป๐Ÿ‡ณ 103.167.89.222
๐Ÿ‡ซ๐Ÿ‡ฎ 80.223.201.173
๐Ÿ‡ฐ๐Ÿ‡ท 221.156.126.1
๐Ÿ‡บ๐Ÿ‡ธ 213.188.81.123
๐Ÿ‡บ๐Ÿ‡ฆ 193.107.177.196
๐Ÿ‡จ๐Ÿ‡ณ 180.76.188.13
๐Ÿ‡ฌ๐Ÿ‡ง 154.91.0.124
๐Ÿ‡ฏ๐Ÿ‡ต 103.163.220.190
๐Ÿ‡ง๐Ÿ‡ฌ 78.128.112.74
๐Ÿ‡ณ๐Ÿ‡ฑ 77.239.124.35
๐Ÿ‡บ๐Ÿ‡ธ 72.17.34.38
๐Ÿ‡ท๐Ÿ‡บ 46.191.141.152
๐Ÿ‡บ๐Ÿ‡ธ 45.78.88.54
๐Ÿ‡ฎ๐Ÿ‡ฉ 41.216.177.55
๐Ÿ‡บ๐Ÿ‡ฆ 213.59.165.109
๐Ÿ‡ฒ๐Ÿ‡พ 166.0.253.101
๐Ÿ‡จ๐Ÿ‡ณ 139.170.155.208
๐Ÿ‡บ๐Ÿ‡ธ 134.122.19.115