185.89.0.22

Classification: Suspicious

185.89.0.22 is a suspicious IP address. Reported by 12 threat sources, last seen 2025-10-07. Network: AS2116 Broadnet AS.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Proxy FireHOL 2023-01-02 18:00:39 2025-10-07 00:47:49 anonymization
HTTP Spammer GPF DNS Blocklist 2019-03-22 08:28:51 2021-05-19 20:23:25 malicious-activity
Anonymizer Maltiverse Research Team 2020-11-22 06:45:09 2021-05-19 17:49:55 anonymizer
DDoS attack Blocklist.net.ua 2020-10-16 01:41:48 2020-11-16 08:32:33
Mail Spammer Blocklist.de 2018-09-22 06:57:14 2020-10-17 07:37:53
Malicious Host HoneyDB 2020-01-30 00:00:00 2020-06-27 00:00:00
IMAP Attacker Blocklist.de 2019-08-23 00:33:13 2020-06-25 08:32:33
Bruteforce login attacker Blocklist.de 2020-04-11 01:13:52 2020-05-08 01:15:45
HTTP Attacker Blocklist.de 2020-04-11 01:09:46 2020-05-07 07:37:35
Malicious host Darklist 2020-04-27 01:52:16 2020-04-27 01:52:16
HTTP Spammer Cleantalk.org 2018-08-21 07:13:18 2019-04-05 07:29:05
DDoS Attacker Blocklist.net.ua 2019-01-31 07:35:47 2019-01-31 07:35:47
HTTP Spammer Sblam 2018-12-17 08:43:31 2018-12-17 08:43:31
HTTP Spammer StopForumSpam.com 2018-09-01 15:32:09 2018-09-01 15:32:09
Anonymizer Maltiverse 2018-08-24 08:13:30 2018-08-24 08:13:30
HTTP Spammer Myip.ms 2018-08-21 08:54:13 2018-08-21 08:54:13

Tags

anonymization abuse bot anonymizer mail spam attacker imap pop3 sasl apache ddos rfi login bruteforce joomla wordpress

Whois information

AS name
AS2116 Broadnet AS
AS registry
ripencc
AS date
2015-02-19 00:00:00
AS CIDR
185.89.0.0/22
CIDR
185.89.0.0/22
Address
Torolv Kveldulvsons gate 37A 8800 Sandnessjoen NORWAY
City
Sandnessjøen
Country
NO — Norway 🇳🇴
First indexed
2018-08-21 07:13:18
Last updated
2025-10-07 00:47:49