Showing current intelligence for this indicator.

IP Information for 89.21.67.157

Location Amsterdam, 🇳🇱 Netherlands
ASN AS25369 — BANDWIDTH-AS, GB
BGP Prefix 89.21.67.0/24
Registry ripencc
IP Address 89.21.67.157

IOC Matches

ID Type Tag Source Last seen Comments
318217 IP honeypot 4 2026-05-12 21:47:24
  • 2026-05-12: Observed 4 times. Targeted ports: 24715. Country: The Netherlands.
  • 2026-05-10: Observed 19 times. Targeted ports: 33712, 53216, 61218, 63615. Country: The Netherlands. Reputation: known attacker.
  • 2026-05-09: Observed 8 times. Targeted ports: 10169. Country: The Netherlands. Reputation: known attacker.
  • 2026-05-08: Observed 9 times. Targeted ports: 1368. Country: Netherlands. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM spurious retransmission.
  • 2026-05-07: Observed 9 times. Targeted ports: 59231. Country: Netherlands. Reputation: known attacker.
  • 2026-05-06: Observed 7 times. Targeted ports: 45581. Country: Netherlands. Reputation: known attacker.
  • 2026-05-05: Observed 19 times. Targeted ports: 49352, 53743, 61141, 65072. Country: Netherlands. Reputation: known attacker.
  • 2026-05-03: Observed 9 times. Targeted ports: 60761. Country: Netherlands. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
  • 2026-05-02: Observed 2 times. Targeted ports: 52191. Country: Netherlands.
  • 2026-05-01: Observed 5 times. Targeted ports: 53792. Country: Netherlands.
  • 2026-04-30: Observed 7 times. Targeted ports: 51160. Country: Netherlands.
  • 2026-04-28: Observed 7 times. Targeted ports: 61726. Country: Netherlands.
  • 2026-04-27: Observed 7 times. Targeted ports: 14032. Country: Netherlands.
  • 2026-04-26: Observed 19 times. Targeted ports: 50019, 50188, 54740, 65189. Country: Netherlands.

URLs on this IP

No URLs found for this IP.

Passive DNS

No pDNS records found for 89.21.67.157.

Search History

ID Source Last seen
58544 web 2026-05-17 02:31:34

Whois

No Whois record yet. The worker will fetch it when this IP is in the queue.