City: Amsterdam
Region: Noord Holland
Country: The Netherlands
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '89.21.67.128 - 89.21.67.191'
% Abuse contact for '89.21.67.128 - 89.21.67.191' is 'abuse@infrawat.ch'
inetnum: 89.21.67.128 - 89.21.67.191
netname: INFRAWATCH
remarks: -----------------------------------------------------
remarks: Real time internet intelligence data
remarks: infrawat.ch
remarks: -----------------------------------------------------
country: NL
geoloc: 52.39145915105574 4.665153817401809
org: ORG-IL948-RIPE
admin-c: LD7399-RIPE
tech-c: LD7399-RIPE
status: ASSIGNED PA
created: 2026-04-26T03:07:05Z
last-modified: 2026-04-26T03:07:05Z
source: RIPE
mnt-by: HYDRA-MNT
organisation: ORG-IL948-RIPE
org-name: Infrawatch Limited
org-type: OTHER
address: 128 City Road
address: London
address: EC1V 2NX
country: GB
abuse-c: ACRO64026-RIPE
mnt-ref: HYDRA-MNT
created: 2026-03-26T04:32:13Z
last-modified: 2026-04-27T01:46:41Z
source: RIPE # Filtered
mnt-by: HYDRA-MNT
person: Lloyd Davies
address: 128 City Road
address: London
address: EC1V 2NX
address: United Kingdom
phone: +448000803330
nic-hdl: LD7399-RIPE
created: 2026-03-26T04:34:31Z
last-modified: 2026-04-27T01:47:59Z
source: RIPE # Filtered
mnt-by: HYDRA-MNT
% Information related to '89.21.67.0/24AS25369'
route: 89.21.67.0/24
origin: AS25369
mnt-by: HYDRA-MNT
created: 2023-04-14T14:05:41Z
last-modified: 2023-04-14T14:05:41Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.122.1 (DEXTER); <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.21.67.184
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16423
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;89.21.67.184. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026061601 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 17 02:00:09 CST 2026
;; MSG SIZE rcvd: 105184.67.21.89.in-addr.arpa domain name pointer 89-21-67-184.infrawat.ch.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
184.67.21.89.in-addr.arpa name = 89-21-67-184.infrawat.ch.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 36.89.57.122 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08050931) |
2019-08-05 17:15:11 |
| 103.60.108.134 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08050931) |
2019-08-05 16:51:56 |
| 183.157.174.52 | attackbotsspam | [portscan] tcp/22 [SSH] *(RWIN=21866)(08050931) |
2019-08-05 17:02:38 |
| 103.93.178.45 | attackspambots | [portscan] tcp/139 [NetBIOS Session Service] [SMB remote code execution attempt: port tcp/445] [scan/connect: 2 time(s)] *(RWIN=1024)(08050931) |
2019-08-05 17:09:15 |
| 167.114.192.162 | attackspambots | Aug 5 09:03:39 srv03 sshd\[7247\]: Invalid user test from 167.114.192.162 port 55347 Aug 5 09:03:39 srv03 sshd\[7247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.192.162 Aug 5 09:03:41 srv03 sshd\[7247\]: Failed password for invalid user test from 167.114.192.162 port 55347 ssh2 |
2019-08-05 16:40:44 |
| 79.124.7.4 | attack | Aug 5 11:09:33 yabzik sshd[19359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.124.7.4 Aug 5 11:09:36 yabzik sshd[19359]: Failed password for invalid user user6 from 79.124.7.4 port 34554 ssh2 Aug 5 11:18:01 yabzik sshd[22107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.124.7.4 |
2019-08-05 16:37:24 |
| 116.0.45.82 | attackbotsspam | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08050931) |
2019-08-05 16:51:06 |
| 41.230.119.242 | attackspambots | [portscan] tcp/23 [TELNET] *(RWIN=25649)(08050931) |
2019-08-05 16:55:16 |
| 5.200.58.90 | attack | [portscan] Port scan |
2019-08-05 16:38:50 |
| 118.24.30.97 | attack | Aug 5 09:56:59 microserver sshd[64013]: Invalid user cms from 118.24.30.97 port 40950 Aug 5 09:56:59 microserver sshd[64013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.30.97 Aug 5 09:57:01 microserver sshd[64013]: Failed password for invalid user cms from 118.24.30.97 port 40950 ssh2 Aug 5 10:01:13 microserver sshd[64615]: Invalid user ines from 118.24.30.97 port 49716 Aug 5 10:01:13 microserver sshd[64615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.30.97 Aug 5 10:13:39 microserver sshd[883]: Invalid user bukkit from 118.24.30.97 port 47424 Aug 5 10:13:39 microserver sshd[883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.30.97 Aug 5 10:13:41 microserver sshd[883]: Failed password for invalid user bukkit from 118.24.30.97 port 47424 ssh2 Aug 5 10:17:55 microserver sshd[1533]: Invalid user kelly from 118.24.30.97 port 56174 Aug 5 10:17:55 microser |
2019-08-05 16:34:01 |
| 189.186.169.117 | attackspambots | [SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08050931) |
2019-08-05 16:47:59 |
| 125.112.212.12 | attackspam | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08050931) |
2019-08-05 17:04:28 |
| 1.169.100.146 | attackbotsspam | port 23 attempt blocked |
2019-08-05 16:33:37 |
| 193.201.224.232 | attackbotsspam | Scanning random ports - tries to find possible vulnerable services |
2019-08-05 17:18:32 |
| 167.99.144.82 | attackbotsspam | Aug 5 10:27:11 plex sshd[24531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.144.82 user=uucp Aug 5 10:27:13 plex sshd[24531]: Failed password for uucp from 167.99.144.82 port 53148 ssh2 |
2019-08-05 16:32:34 |