JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.21.67.146

89.21.67.146 was found in our database!

This IP was reported 1,212 times. Confidence of Abuse is 100%: ?

100%

ISP	Infrawatch Limited
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	89-21-67-146.infrawat.ch
Domain Name	infrawat.ch
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.21.67.146

Whois 89.21.67.146

IP Abuse Reports for 89.21.67.146:

This IP address has been reported a total of 1,212 times from 148 distinct sources. 89.21.67.146 was first reported on April 24th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 rellim.com	2026-04-27 01:22:10 (1 month ago)	Apr 26 03:18:58 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:0 ... show more Apr 26 03:18:58 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=89.21.67.146 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=60882 DPT=41606 WINDOW=65535 RES=0x00 SYN URGP=0 Apr 26 09:37:45 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=89.21.67.146 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=52467 DPT=50586 WINDOW=65535 RES=0x00 SYN URGP=0 Apr 26 18:22:09 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=89.21.67.146 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=51792 DPT=42494 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Justin F. \| AS204464	2026-04-27 00:53:09 (1 month ago)	Honeypot [nx-infrastructure]: SSH handshake/banner (42 bytes of payload); 14627 [1] TCP Reported by: ... show more Honeypot [nx-infrastructure]: SSH handshake/banner (42 bytes of payload); 14627 [1] TCP Reported by: Justin F. show less	SSH
🇺🇸 xmission.com	2026-04-27 00:49:19 (1 month ago)	Blocked by UFW (TCP on 56225) Source port: 57496 TTL: 49 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 56225) Source port: 57496 TTL: 49 Packet length: 40 TOS: 0x08 This report (for 89.21.67.146) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇺 Agrohim	2026-04-27 00:19:16 (1 month ago)	Gate B blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-04-26 23:37:51 (1 month ago)	tcp/44919 (2 or more attempts)	Port Scan
🇩🇪 iNetWorker	2026-04-26 22:31:24 (1 month ago)	firewall-block, port(s): 58650/tcp	Port Scan
🇫🇮 6kilowatti	2026-04-26 22:20:51 (1 month ago)	2026-04-27T01:20:50.442304+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-04-27T01:20:50.442304+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=89.21.67.146 DST=192.168.0.102 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=0 PROTO=TCP SPT=21789 DPT=34013 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 gbzret4d	2026-04-26 21:34:42 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 35659 GET / User-Agent: Mozilla/5.0 (compatible; In ... show more Honeypot [uk-production01]: HTTP/1.1 request on 35659 GET / User-Agent: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) Accept: /; 35659 [1] TCP show less	Hacking Bad Web Bot
🇦🇹 Pingger Shikkoken	2026-04-26 21:19:53 (1 month ago)	2026-04-26T21:19:53+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-04-26T21:19:53+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=89.21.67.146 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=0 PROTO=TCP SPT=44699 DPT=59070 WINDOW=65535 RES=0x00 SYN URGP=0 2026-04-26T21:19:53+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=89.21.67.146 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=0 PROTO=TCP SPT=44699 DPT=59070 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Hacking
🇺🇸 technash	2026-04-26 21:07:40 (1 month ago)	Unauthorized network connection attempt(s) via TCP port(s) from TI-mapped IP entity detected [Fortin ... show more Unauthorized network connection attempt(s) via TCP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel]. Deny/drop traffic. show less	Port Scan
🇺🇸 MPL	2026-04-26 20:42:17 (1 month ago)	tcp port scan (7 or more attempts)	Port Scan
🇺🇸 MPL	2026-04-26 20:42:17 (1 month ago)	tcp port scan (9 or more attempts)	Port Scan
🇵🇱 sefinek.net	2026-04-26 19:49:19 (1 month ago)	Honeypot hit: SSH handshake/banner (42 bytes of payload); 46365 [1] TCP Reported by: https://github. ... show more Honeypot hit: SSH handshake/banner (42 bytes of payload); 46365 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇩🇪 yangfan	2026-04-26 18:49:23 (1 month ago)	UFW Blocked [28580/TCP] Source: 89.21.67.146:49659 TTL: 57 Lenth: 40 TOS: 0x00	Port Scan
🇩🇪 Justin F. \| AS204464	2026-04-26 18:15:06 (1 month ago)	Honeypot [nx-infrastructure]: HTTP request on 40028 �	Hacking Bad Web Bot

Showing 1096 to 1110 of 1212 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.13.6.58

🇨🇳 116.207.108.212

🇺🇿 94.232.26.187

🇺🇸 66.132.186.231

🇳🇱 5.255.122.197

🇲🇳 192.82.65.72

🇺🇸 162.172.53.32

🇨🇦 67.215.2.86

🇺🇸 65.49.1.87

🇩🇪 43.228.157.134

🇰🇪 41.60.232.249

🇮🇩 36.64.19.254

🇺🇸 195.184.76.171

🇸🇬 193.37.32.45

🇿🇲 165.56.66.188

🇺🇸 162.216.150.241

🇪🇸 141.109.168.108

🇰🇷 114.29.11.190

🇺🇸 65.60.5.244

🇩🇪 36.255.97.11