188.126.89.48

Classification: Malicious

188.126.89.48 is a malicious IP address. Reported by 6 threat sources, last seen 2026-08-31. Network: AS42708 Glesys Ab.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
SSH Attacker Blocklist.de 2021-02-02 09:49:16 2026-08-31 14:00:20 attacker malicious-activity
HTTP Spammer StopForumSpam.com 2023-04-15 16:01:42 2026-08-20 07:31:50 malicious-activity
VPN IPWhois.io 2025-02-13 07:05:48 2026-06-30 15:01:12 anonymization
HTTP Attacker AbuseIPDB 2026-04-11 18:44:00 2026-06-30 14:07:41 malicious-activity
Hacking AbuseIPDB 2026-06-19 02:02:34 2026-06-29 07:33:44 malicious-activity
Bruteforce AbuseIPDB 2026-05-28 18:10:37 2026-06-28 05:11:59 malicious-activity
SSH Attacker AbuseIPDB 2026-06-15 19:56:59 2026-06-28 03:16:04 malicious-activity
Port Scanner AbuseIPDB 2026-06-07 12:11:40 2026-06-28 02:13:36 anomalous-activity
SSH Attacker Blocklist.net.ua 2026-06-16 16:06:00 2026-06-16 16:06:00 malicious-activity
Malicious Host AbuseIPDB 2026-06-12 23:56:03 2026-06-12 23:56:03 compromised malicious-activity
Suspicious Host AbuseIPDB 2025-01-28 20:53:19 2026-06-07 12:11:40 anomalous-activity
HTTP Scrapper AbuseIPDB 2026-05-27 01:54:00 2026-05-27 01:54:00 anomalous-activity
Proxy IPWhois.io 2025-06-11 23:55:40 2025-06-15 05:09:18 anonymization
HTTP Attacker Blocklist.de 2025-01-27 08:29:48 2025-01-28 11:08:51 malicious-activity
DDoS Attacker Blocklist.net.ua 2023-06-27 07:49:58 2024-06-27 10:59:08 malicious-activity
Malicious Host HoneyDB 2021-02-02 00:00:00 2021-02-09 00:00:00 malicious-activity

Tags

abuse bot ssh bruteforce apache ddos rfi attacker

Whois information

AS name
AS42708 Glesys Ab
AS registry
ripencc
AS date
2009-07-22 00:00:00
AS CIDR
188.126.64.0/19
CIDR
188.126.89.0/25
Registrant
Glesys Ab
Address
Box 134 31122 Falkenberg Sweden
City
Helsinki
Postal code
02101
Country
FI — Finland 🇫🇮
First indexed
2021-02-02 09:49:16
Last updated
2026-08-31 14:00:20

Malicious IPs in the same CIDR

188.126.89.71 188.126.94.177 188.126.89.57 188.126.89.51 188.126.89.75 188.126.89.155 188.126.89.157 188.126.94.205 188.126.89.79 188.126.89.150 188.126.76.33 188.126.89.48 188.126.83.38 188.126.89.56 188.126.89.52 188.126.89.93 188.126.89.61 188.126.89.38 188.126.89.46 188.126.89.62 188.126.89.39 188.126.89.42 188.126.89.44 188.126.89.58 188.126.89.40