89.21.67.167

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted. Benign Crawler 89.21.67.167 is an IP address from within our benign crawler whitelist. We confidently believe it is not a bad bot. If you disagree, please provide us with compelling evidence.
Abuse Confidence Score
0% Low Risk
5,084 reports
343 reporters · latest 1 hour ago
ISP
Infrawatch Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS25369
Hostname(s)
89-21-67-167.infrawat.ch
Domain Name
infrawat.ch
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
5,084 from 343 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 472 🇩🇪 Germany 377 🇫🇷 France 102
Most common categories Port Scan 1,230 Hacking 295 Brute-Force 131 Web App Attack 90 Bad Web Bot 35
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 vtchost.com
scanning closed ports ...
Port Scan
🇨🇳 yiyan
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-04T02:24:15.053Z ACCEPT host=89.21.67.167 port=4980 fd=6 n=5/8192
Brute-Force SSH
Anonymous
Blocked by firewall on hugin [62302/tcp] | Rule: Blocklist | SPT: 52784 | TTL: 57 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇷 uthul
T-Pot honeypot: 2 hits on ports [24569] (automated)
Port Scan
🇩🇪 satelliteproxy
DPI (Deep Packet Inspection) identified this source as an abusive automated web bot.
Bad Web Bot
🇺🇸 MPL
tcp/2222
Port Scan
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan
🇪🇸 jiossal
IP_Trapped_MikroTik_Firewall_HoneyPot
Brute-Force
🇺🇸 MPL
tcp/33241
Port Scan
🇺🇸 MPL
tcp port scan (3 or more attempts)
Port Scan
Anonymous
Port Scan Brute-Force
🇺🇸 MPL
tcp ports: 47059,31818 (4 or more attempts)
Port Scan
🇬🇧 Andrew
Blocked by UFW (TCP on port 37077). Source port: 31409 TTL: 55 Packet length: 40 TOS: 0x00 This report (for 89.21.67.167) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 ValtonTahiri
Port Scan
🇺🇸 MPL
tcp/3167
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.105
🇳🇱 193.47.62.82
🇺🇸 174.67.181.68
🇺🇦 90.96.181.10
🇳🇱 86.38.187.9
🇺🇸 70.184.111.182
🇺🇸 34.168.59.58
🇨🇳 27.188.184.13
🇵🇰 202.47.43.47
🇬🇧 194.50.235.148
🇺🇸 192.190.221.7
🇮🇶 185.158.21.98
🇨🇳 182.88.167.122
🇪🇨 181.199.60.190
🇺🇸 154.6.110.30
🇮🇳 122.161.48.180
🇿🇦 102.64.36.178
🇨🇦 85.217.149.19
🇰🇷 52.141.2.20
🇺🇸 50.6.195.65
feedback