City: Amsterdam
Region: Noord Holland
Country: The Netherlands
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '89.21.67.128 - 89.21.67.191'
% Abuse contact for '89.21.67.128 - 89.21.67.191' is 'abuse@infrawat.ch'
inetnum: 89.21.67.128 - 89.21.67.191
netname: INFRAWATCH
remarks: -----------------------------------------------------
remarks: Real time internet intelligence data
remarks: infrawat.ch
remarks: -----------------------------------------------------
country: NL
geoloc: 52.39145915105574 4.665153817401809
org: ORG-IL948-RIPE
admin-c: LD7399-RIPE
tech-c: LD7399-RIPE
status: ASSIGNED PA
created: 2026-04-26T03:07:05Z
last-modified: 2026-04-26T03:07:05Z
source: RIPE
mnt-by: HYDRA-MNT
organisation: ORG-IL948-RIPE
org-name: Infrawatch Limited
org-type: OTHER
address: 128 City Road
address: London
address: EC1V 2NX
country: GB
abuse-c: ACRO64026-RIPE
mnt-ref: HYDRA-MNT
created: 2026-03-26T04:32:13Z
last-modified: 2026-04-27T01:46:41Z
source: RIPE # Filtered
mnt-by: HYDRA-MNT
person: Lloyd Davies
address: 128 City Road
address: London
address: EC1V 2NX
address: United Kingdom
phone: +448000803330
nic-hdl: LD7399-RIPE
created: 2026-03-26T04:34:31Z
last-modified: 2026-04-27T01:47:59Z
source: RIPE # Filtered
mnt-by: HYDRA-MNT
% Information related to '89.21.67.0/24AS25369'
route: 89.21.67.0/24
origin: AS25369
mnt-by: HYDRA-MNT
created: 2023-04-14T14:05:41Z
last-modified: 2023-04-14T14:05:41Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.123 (BUSA); <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.21.67.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26968
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;89.21.67.172. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082001 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 21 13:00:40 CST 2026
;; MSG SIZE rcvd: 105172.67.21.89.in-addr.arpa domain name pointer 89-21-67-172.infrawat.ch.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
172.67.21.89.in-addr.arpa name = 89-21-67-172.infrawat.ch.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.180.41 | attackbotsspam | Dec 15 17:45:00 work-partkepr sshd\[24027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Dec 15 17:45:02 work-partkepr sshd\[24027\]: Failed password for root from 222.186.180.41 port 64604 ssh2 ... |
2019-12-16 01:57:43 |
| 59.115.224.177 | attackbotsspam | 1576421491 - 12/15/2019 15:51:31 Host: 59.115.224.177/59.115.224.177 Port: 445 TCP Blocked |
2019-12-16 01:39:59 |
| 191.190.106.147 | attack | Dec 15 12:33:10 plusreed sshd[13842]: Invalid user fornara from 191.190.106.147 ... |
2019-12-16 01:38:23 |
| 207.154.209.159 | attackspambots | Dec 15 17:55:15 MK-Soft-Root2 sshd[5772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.209.159 Dec 15 17:55:17 MK-Soft-Root2 sshd[5772]: Failed password for invalid user anaADMIN from 207.154.209.159 port 50556 ssh2 ... |
2019-12-16 01:53:13 |
| 37.159.137.186 | attackbots | port scan and connect, tcp 23 (telnet) |
2019-12-16 01:54:06 |
| 134.175.154.93 | attackbots | Dec 15 11:45:49 TORMINT sshd\[16631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.154.93 user=root Dec 15 11:45:50 TORMINT sshd\[16631\]: Failed password for root from 134.175.154.93 port 53852 ssh2 Dec 15 11:53:42 TORMINT sshd\[17002\]: Invalid user bonhomme from 134.175.154.93 Dec 15 11:53:42 TORMINT sshd\[17002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.154.93 ... |
2019-12-16 01:38:50 |
| 85.185.149.28 | attackspam | Dec 15 18:25:54 ns41 sshd[30550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.185.149.28 |
2019-12-16 02:00:38 |
| 222.186.42.4 | attackspam | --- report --- Dec 15 14:59:52 sshd: Connection from 222.186.42.4 port 51474 Dec 15 14:59:53 sshd: Failed none for root from 222.186.42.4 port 51474 ssh2 Dec 15 14:59:54 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4 user=root Dec 15 14:59:55 sshd: Failed password for root from 222.186.42.4 port 51474 ssh2 Dec 15 14:59:59 sshd: Failed password for root from 222.186.42.4 port 51474 ssh2 Dec 15 15:00:02 sshd: Failed password for root from 222.186.42.4 port 51474 ssh2 Dec 15 15:00:05 sshd: Failed password for root from 222.186.42.4 port 51474 ssh2 |
2019-12-16 02:06:14 |
| 178.42.64.20 | attack | Automatic report - Port Scan Attack |
2019-12-16 01:58:37 |
| 120.131.3.91 | attack | Too many connections or unauthorized access detected from Arctic banned ip |
2019-12-16 01:27:48 |
| 185.153.199.109 | attackbotsspam | RDP Bruteforce |
2019-12-16 02:01:03 |
| 180.250.108.133 | attackbots | Dec 15 16:32:26 marvibiene sshd[50717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.108.133 user=root Dec 15 16:32:27 marvibiene sshd[50717]: Failed password for root from 180.250.108.133 port 36652 ssh2 Dec 15 16:39:15 marvibiene sshd[50858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.108.133 user=mysql Dec 15 16:39:17 marvibiene sshd[50858]: Failed password for mysql from 180.250.108.133 port 43360 ssh2 ... |
2019-12-16 01:59:54 |
| 103.213.192.78 | attackspam | IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking. |
2019-12-16 01:37:47 |
| 162.243.10.64 | attackspambots | Dec 15 18:35:31 loxhost sshd\[32643\]: Invalid user nesje from 162.243.10.64 port 55846 Dec 15 18:35:31 loxhost sshd\[32643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.10.64 Dec 15 18:35:33 loxhost sshd\[32643\]: Failed password for invalid user nesje from 162.243.10.64 port 55846 ssh2 Dec 15 18:40:43 loxhost sshd\[329\]: Invalid user smmsp from 162.243.10.64 port 33300 Dec 15 18:40:44 loxhost sshd\[329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.10.64 ... |
2019-12-16 01:55:31 |
| 51.15.58.201 | attack | Dec 15 07:17:46 web1 sshd\[23514\]: Invalid user villines from 51.15.58.201 Dec 15 07:17:46 web1 sshd\[23514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.58.201 Dec 15 07:17:49 web1 sshd\[23514\]: Failed password for invalid user villines from 51.15.58.201 port 55584 ssh2 Dec 15 07:23:21 web1 sshd\[24100\]: Invalid user sites6 from 51.15.58.201 Dec 15 07:23:21 web1 sshd\[24100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.58.201 |
2019-12-16 01:36:03 |