Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hessen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
159.89.168.216 attackspam
Oct 13 19:52:18 xeon sshd[48386]: Failed password for invalid user admin from 159.89.168.216 port 54250 ssh2
2020-10-14 03:02:04
159.89.163.226 attack
'Fail2Ban'
2020-10-14 00:08:26
159.89.168.216 attackspam
Oct 13 12:05:20 localhost sshd\[23968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.168.216  user=root
Oct 13 12:05:22 localhost sshd\[23968\]: Failed password for root from 159.89.168.216 port 47334 ssh2
Oct 13 12:08:42 localhost sshd\[24196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.168.216  user=root
Oct 13 12:08:44 localhost sshd\[24196\]: Failed password for root from 159.89.168.216 port 40126 ssh2
Oct 13 12:12:08 localhost sshd\[24582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.168.216  user=root
...
2020-10-13 18:18:01
159.89.163.226 attack
" "
2020-10-13 07:58:03
159.89.169.164 attackspam
k+ssh-bruteforce
2020-10-10 01:47:05
159.89.169.164 attackbotsspam
2020-10-09T02:25:01.944175linuxbox-skyline sshd[60751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.169.164  user=root
2020-10-09T02:25:03.406722linuxbox-skyline sshd[60751]: Failed password for root from 159.89.169.164 port 36772 ssh2
...
2020-10-09 17:31:18
159.89.163.226 attackbots
Brute-force attempt banned
2020-10-04 08:59:31
159.89.163.226 attackspambots
SSH Bruteforce Attempt on Honeypot
2020-10-04 01:33:56
159.89.163.226 attack
SSH Invalid Login
2020-10-02 06:25:12
159.89.163.226 attackspambots
(sshd) Failed SSH login from 159.89.163.226 (IN/India/-): 5 in the last 3600 secs
2020-10-01 22:52:58
159.89.165.127 attackspam
SSH BruteForce Attack
2020-09-21 21:19:09
159.89.165.127 attackbots
...
2020-09-21 13:05:22
159.89.165.127 attack
...
2020-09-21 04:57:13
159.89.163.226 attack
Sep 21 00:22:18 gw1 sshd[25922]: Failed password for root from 159.89.163.226 port 35480 ssh2
...
2020-09-21 03:35:23
159.89.163.226 attackbots
Invalid user oracle from 159.89.163.226 port 55498
2020-09-20 19:43:57
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       159.89.0.0 - 159.89.255.255
CIDR:           159.89.0.0/16
NetName:        DIGITALOCEAN-159-89-0-0
NetHandle:      NET-159-89-0-0-1
Parent:         NET159 (NET-159-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   DigitalOcean, LLC (DO-13)
RegDate:        2017-07-07
Updated:        2020-04-03
Comment:        Routing and Peering Policy can be found at https://www.as14061.net
Comment:        
Comment:        Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref:            https://rdap.arin.net/registry/ip/159.89.0.0



OrgName:        DigitalOcean, LLC
OrgId:          DO-13
Address:        105 Edgeview Drive, Suite 425
City:           Broomfield
StateProv:      CO
PostalCode:     80021
Country:        US
RegDate:        2012-05-14
Updated:        2025-04-11
Ref:            https://rdap.arin.net/registry/entity/DO-13


OrgTechHandle: NOC32014-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-646-827-4366 
OrgTechEmail:  noc@digitalocean.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN

OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName:   DigitalOcean Abuse
OrgAbusePhone:  +1-646-827-4366 
OrgAbuseEmail:  abuse@digitalocean.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/DIGIT19-ARIN

OrgNOCHandle: NOC32014-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-646-827-4366 
OrgNOCEmail:  noc@digitalocean.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.89.16.197
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47181
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;159.89.16.197.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026110202 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 03 05:30:20 CST 2026
;; MSG SIZE  rcvd: 106
Host info
Host 197.16.89.159.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 197.16.89.159.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
118.40.245.147 attackspambots
 TCP (SYN) 118.40.245.147:64572 -> port 23, len 40
2020-06-05 02:17:21
106.12.51.110 attackbots
5x Failed Password
2020-06-05 01:52:26
171.243.28.131 attack
Unauthorized connection attempt from IP address 171.243.28.131 on Port 445(SMB)
2020-06-05 01:49:10
178.62.37.78 attackspambots
5x Failed Password
2020-06-05 02:02:45
94.191.120.108 attack
$f2bV_matches
2020-06-05 02:11:27
85.208.213.114 attackbotsspam
5x Failed Password
2020-06-05 02:03:35
185.202.2.57 attackspam
scan r
2020-06-05 01:47:34
92.118.114.20 attack
2020-06-04 06:59:05.905939-0500  localhost smtpd[5970]: NOQUEUE: reject: RCPT from mail.reveri.london[92.118.114.20]: 554 5.7.1 Service unavailable; Client host [92.118.114.20] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
2020-06-05 02:05:56
176.103.98.46 attack
 TCP (SYN) 176.103.98.46:21912 -> port 8080, len 40
2020-06-05 01:41:22
106.13.19.75 attack
Jun  4 19:18:53 server sshd[28516]: Failed password for root from 106.13.19.75 port 46590 ssh2
Jun  4 19:21:49 server sshd[30858]: Failed password for root from 106.13.19.75 port 54560 ssh2
Jun  4 19:24:43 server sshd[33124]: Failed password for root from 106.13.19.75 port 34284 ssh2
2020-06-05 02:14:45
222.186.173.201 attack
Jun  4 19:28:18 pve1 sshd[7938]: Failed password for root from 222.186.173.201 port 41576 ssh2
Jun  4 19:28:23 pve1 sshd[7938]: Failed password for root from 222.186.173.201 port 41576 ssh2
...
2020-06-05 01:51:34
128.134.190.69 attack
Unauthorized connection attempt detected from IP address 128.134.190.69 to port 23
2020-06-05 01:43:14
122.51.229.124 attackspambots
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-06-05 01:43:30
177.126.224.24 attackbotsspam
5x Failed Password
2020-06-05 01:40:04
148.101.203.100 attack
Unauthorised access (Jun  4) SRC=148.101.203.100 LEN=52 TTL=113 ID=1057 DF TCP DPT=445 WINDOW=8192 SYN
2020-06-05 02:07:02

Recently Reported IPs

64.205.72.84 14.213.5.17 86.38.187.36 77.67.26.29
64.205.72.56 64.205.72.30 64.205.72.10 200.138.46.42
200.138.46.33 200.138.46.139 66.132.159.111 18.97.5.100
46.101.183.76 39.100.86.112 209.38.214.42 164.92.142.170
165.232.76.100 181.45.132.180 103.236.71.44 124.156.154.196