IP reputation lookup

Geolocation, network attribution and threat signals for any IPv4 address. Backed by 6 honeypots and a dozen public blocklists.

200 queries / day · free
status ● operational
Result for
89.66.154.168
89-66-154-168.dynamic.chello.pl AS6830 LIBERTYGLOBAL Liberty Global formerly UPC Broadband Holding, aka AORTA, NL 🇵🇱 Poland Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.3.16
Suspicious
82 / 100
Reputation score

Reputation signals

1 of 6 categories triggered
Web spam
Clean
No match · Comment & forum spam blocklists (StopForumSpam, NOC forum networks).
Web attacks
Detected
Recently observed in web exploit attempts.
Botnet C2
Clean
No match · C2 indicators from ccabuse and feodotracker.
Email spam
Clean
No match · Spamhaus DROP / EDROP listings.
Brute force
Clean
No match · SSHD honeypot capture against this IP or its /24.
DDoS source
Clean
No match · Recent amplification or volumetric activity.

Network usage

probe @ 18 Jun 2026 09:24 UTC
Routable true
Hosting provider false
Pingable (ICMP) true
Tor exit node false
Web server Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.3.16
Open proxy / VPN false
Bogon (unroutable)false
Country 🇵🇱 PL

Recommended actions

based on detected signals
BLOCK
Block traffic
Drop traffic from this IP at your firewall / edge.
BLOCK
Block account registrations
Prevent sign-ups from this address.
BLOCK
Block comments & forms
Block forum, comment and contact-form submissions.

Why: Likely malicious traffic from blacklisted IP addresses.

.htaccess nginx iptables
# Outpost · block 89.66.154.168 (suspicious · 82/100) # 1 reputation signal detected Require all granted Require not ip 89.66.154.168 # or block the entire /24: Require not ip 89.66.154.0/24

Raw response

application/json · cached 60s
{ "ip": "89.66.154.168", "reverse": "89-66-154-168.dynamic.chello.pl", "as_number": "6830", "as_name": "LIBERTYGLOBAL Liberty Global formerly UPC Broadband Holding, aka AORTA, NL", "country_code": "PL", "country": "Poland", "usage": { "is_pingable": true, "is_webserver": true, "is_routable": true, "webserver": "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.3.16", "is_tor": false, "is_proxy": false, "is_hosting": false, "is_bogon": false }, "reputation": { "web_spam": false, "web_attacks": true, "details": "IP being used in web attacks.", "botnet": false, "email_spam": false, "brute_force": false, "ddos": false }, "recommendations": { "block_traffic": true, "block_registrations": true, "block_comments": true, "details": "Likely malicious traffic from blacklisted IP addresses." } }