IP Information for 89.21.67.158

Location Amsterdam, 🇳🇱 Netherlands
ASN AS25369 — BANDWIDTH-AS, GB
BGP Prefix 89.21.67.0/24
Registry ripencc
IP Address 89.21.67.158

IOC Matches

ID Type Tag Source Last seen Comments
320276 IP honeypot 4 2026-05-12 19:40:45
  • 2026-05-12: Observed 5 times. Targeted ports: 3100. Country: The Netherlands.
  • 2026-05-11: Observed 9 times. Targeted ports: 35966. Country: The Netherlands.
  • 2026-05-10: Observed 6 times. Targeted ports: 6044. Country: The Netherlands. Reputation: known attacker.
  • 2026-05-09: Observed 8 times. Targeted ports: 10169. Country: The Netherlands. Reputation: known attacker.
  • 2026-05-07: Observed 9 times. Targeted ports: 2733. Country: Netherlands. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
  • 2026-05-06: Observed 8 times. Targeted ports: 62506. Country: Netherlands.
  • 2026-05-05: Observed 24 times. Targeted ports: 2469, 52110, 59644, 60441, 64709. Country: Netherlands.
  • 2026-05-04: Observed 9 times. Targeted ports: 24215. Country: Netherlands. Reputation: known attacker.
  • 2026-05-03: Observed 6 times. Targeted ports: 31192. Country: Netherlands. Reputation: known attacker.
  • 2026-05-02: Observed 2 times. Targeted ports: 32266. Country: Netherlands.
  • 2026-05-01: Observed 23 times. Targeted ports: 49193, 60399, 60402, 64006, 65528. Country: Netherlands.
  • 2026-04-29: Observed 8 times. Targeted ports: 35064. Country: Netherlands. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
  • 2026-04-28: Observed 10 times. Targeted ports: 10288, 56711. Country: Netherlands.
  • 2026-04-27: Observed 8 times. Targeted ports: 11522. Country: Netherlands. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

URLs on this IP

No URLs found for this IP.

Passive DNS

No pDNS records found for 89.21.67.158.

Search History

No search history for this value.

Whois

No Whois record yet. The worker will fetch it when this IP is in the queue.