Is 172.86.72.89 malicious?

IP reputation report for 172.86.72.89: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.

172.86.72.89 is listed on 19 threat intelligence sources

Detected by 19 threat intelligence sources in the isMalicious dataset — review before trusting this IP.

Threat verdict

VerdictListed on blocklists

Appears on threat intelligence blocklists — treat with caution.

Blocklist detections19 sources

Categoriesattack, bruteforce, malware, phishing, suspicious, abuse, attacks, c2

Confidence score100/100

Aggregated confidence across the sources reporting this indicator.

Last updated2026-07-05

Detections

Blocklist - All SSH attacks (48h)attack
Blocklist - All Attacks (48h)attack
Telnet Loginbruteforce
Opendbl Net - Blocklistde All.listmalware
Romain Marcoux - Malicious IPsphishing
IPsum Level 1suspicious
IPsum Level 2suspicious
Telnet Bruteforce IPsbruteforce
IPsum – malicious IP feedmalware
bitwire‑it IP blocklist – bad IPs updated every 2hmalware
ThreatHive - Hive Blocklist
Borestad - AbuseIPDB Blocklist (30d)abuse
FireHOL - Blocklist Deattack
FireHOL - Blocklist De Sshattack
FireHOL - Firehol Level2attack
FireHOL blocklist.de – fail2ban offendersattacks
T145 - Black Mirror IPv4 Blocklistmalware
Bitwire - Inbound Blocklistmalware
X4BNet - Datacenter IPv4 Rangesrisk

Threat categories

attack malware phishing suspicious abuse c2

Related malicious IPs on nearby networks

172.86.72.239 172.86.72.44 172.86.72.242 172.86.72.55 172.86.72.142 172.86.72.238 172.86.123.168 172.86.104.44

Run a live scan of 172.86.72.89 Download IP blocklists →