Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
89.163.146.99 attack
SpamScore above: 10.0
2020-08-15 23:21:33
89.163.146.99 attackspam
2020-07-10T15:43:57+02:00  exim[18457]: H=s.newsletter2020.com [89.163.146.99] sender verify fail for : all relevant MX records point to non-existent hosts
2020-07-10 23:05:49
89.163.146.99 attackbotsspam
SpamScore above: 10.0
2020-06-25 04:30:53
89.163.146.99 attackbots
SpamScore above: 10.0
2020-06-14 20:54:59
89.163.146.99 attackbotsspam
2020-06-07T10:13:57+02:00  exim[19879]: H=s.newsletter2020.com [89.163.146.99] sender verify fail for : all relevant MX records point to non-existent hosts
2020-06-07 19:03:41
89.163.146.99 attackspam
SpamScore above: 10.0
2020-04-16 05:03:52
89.163.146.71 attackbots
20 attempts against mh-misbehave-ban on plane.magehost.pro
2020-01-02 02:24:25
89.163.146.232 attack
20 attempts against mh-misbehave-ban on pluto.magehost.pro
2019-09-27 17:21:01
89.163.146.71 attackspam
20 attempts against mh-misbehave-ban on pine.magehost.pro
2019-09-27 00:22:02
89.163.146.232 attack
#BAD BOTS HOST :: myLoc managed IT AG server-hosting.expert, myloc.de 
#BAD BOT UA :: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)
2019-09-14 09:11:26
Whois info:
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '89.163.128.0 - 89.163.255.255'

% Abuse contact for '89.163.128.0 - 89.163.255.255' is 'abuse@myloc.de'

inetnum:        89.163.128.0 - 89.163.255.255
netname:        DE-MYLOC-DUS-20060217
country:        DE
org:            ORG-MMIA3-RIPE
admin-c:        MOPS-RIPE
tech-c:         MOPS-RIPE
status:         ALLOCATED PA
mnt-by:         MYLOC-MNT
mnt-by:         RIPE-NCC-HM-MNT
created:        2020-11-04T10:31:12Z
last-modified:  2020-11-04T10:31:12Z
source:         RIPE

organisation:   ORG-MMIA3-RIPE
org-name:       WIIT AG
country:        DE
org-type:       LIR
address:        Joachim-Erwin-Platz 3
address:        40212
address:        Dsseldorf
address:        GERMANY
phone:          +4921161708110
fax-no:         +4921161708111
admin-c:        MOPS-RIPE
tech-c:         MOPS-RIPE
abuse-c:        MOPS-RIPE
mnt-ref:        MYLOC-MNT
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         MYLOC-MNT
created:        2019-10-28T10:48:29Z
last-modified:  2025-02-06T07:32:26Z
source:         RIPE # Filtered
remarks:        Phone number is 24/7 NOC number with senior engineer on duty for routing/backbone related issues.
remarks:        This number should NOT be used for customer support nor for requests by public authorities.
remarks:        Thanks for your understanding.

role:           WIIT AG NOC
address:        WIIT AG
address:        Network Operations & Services
address:        Joachim-Erwin-Platz 3
address:        40412 Duesseldorf DE
admin-c:        PHAN
tech-c:         PHAN
tech-c:         DDO
tech-c:         JOH
tech-c:         AKIN-RIPE
tech-c:         STH
tech-c:         KT3550-RIPE
nic-hdl:        MOPS-RIPE
remarks:        +---------------------------------------------------+
remarks:        | Please direct abuse issues ONLY |
remarks:        | via web portal |
remarks:        | https://abuse.wiit-cloud.io/report/create |
remarks:        | |
remarks:        | Complaints in other ways will be deemed |
remarks:        | as spam and not further processed! |
remarks:        +---------------------------------------------------+
remarks:        | Please send legal/law enforcement inquiries to. |
remarks:        | auskunft_AT_myloc.de. |
remarks:        | |
remarks:        | PGP-Key ID for auskunft@myloc.de is 0xBB75B2C5 |
remarks:        | |
remarks:        | You can send your inquiry also via fax to this |
remarks:        | number: +49 211 61708 551 |
remarks:        | |
remarks:        | For questions on legal/law enforcement use phone |
remarks:        | number: +49 211 61708 114 |
remarks:        | |
remarks:        | Mails to abuse@myloc.de WILL |
remarks:        | be automatically processed and the customer WILL |
remarks:        | get a notification about your inquiry. |
remarks:        +---------------------------------------------------+
remarks:        | ONLY In case of routing/peering related issues |
remarks:        | please contact NOC: |
remarks:        | |
remarks:        | 24/7 NOC email: noc@wiit.cloud |
remarks:        | 24/7 NOC phone: +49 211 61708 110 |
remarks:        +---------------------------------------------------+
abuse-mailbox:  abuse@myloc.de
mnt-by:         MYLOC-MNT
created:        2013-02-11T16:38:10Z
last-modified:  2025-02-11T13:37:49Z
source:         RIPE # Filtered

% Information related to '89.163.128.0/17AS24961'

route:          89.163.128.0/17
descr:          myLoc managed IT AG
origin:         AS24961
mnt-by:         MYLOC-MNT
created:        2017-02-02T17:04:51Z
last-modified:  2017-02-02T17:06:25Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.121.2 (DEXTER)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.163.146.197
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 529
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.163.146.197.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026041000 1800 900 604800 86400

;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 10 17:00:19 CST 2026
;; MSG SIZE  rcvd: 107
Host info
197.146.163.89.in-addr.arpa domain name pointer sa197.saturn.dedi.server-hosting.expert.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
197.146.163.89.in-addr.arpa	name = sa197.saturn.dedi.server-hosting.expert.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
89.208.242.96 attackspam
2020-04-18T04:55:37.780415shield sshd\[22292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.208.242.96.16clouds.com  user=root
2020-04-18T04:55:39.980865shield sshd\[22292\]: Failed password for root from 89.208.242.96 port 49658 ssh2
2020-04-18T04:59:46.799180shield sshd\[23586\]: Invalid user qa from 89.208.242.96 port 60966
2020-04-18T04:59:46.802946shield sshd\[23586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.208.242.96.16clouds.com
2020-04-18T04:59:48.857002shield sshd\[23586\]: Failed password for invalid user qa from 89.208.242.96 port 60966 ssh2
2020-04-18 13:28:21
212.95.154.101 attackbots
Apr 17 19:29:16 hanapaa sshd\[20625\]: Invalid user hs from 212.95.154.101
Apr 17 19:29:16 hanapaa sshd\[20625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.95.154.101
Apr 17 19:29:18 hanapaa sshd\[20625\]: Failed password for invalid user hs from 212.95.154.101 port 60446 ssh2
Apr 17 19:32:50 hanapaa sshd\[20911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.95.154.101  user=root
Apr 17 19:32:52 hanapaa sshd\[20911\]: Failed password for root from 212.95.154.101 port 39074 ssh2
2020-04-18 14:00:10
162.243.130.86 attackbotsspam
Port Scan: Events[1] countPorts[1]: 18245 ..
2020-04-18 14:01:18
191.232.174.253 attackbotsspam
Apr 18 05:56:30 santamaria sshd\[17247\]: Invalid user iu from 191.232.174.253
Apr 18 05:56:30 santamaria sshd\[17247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.174.253
Apr 18 05:56:33 santamaria sshd\[17247\]: Failed password for invalid user iu from 191.232.174.253 port 37756 ssh2
...
2020-04-18 13:35:37
94.177.216.68 attackspambots
Apr 18 07:14:28 mout sshd[5938]: Invalid user ex from 94.177.216.68 port 54682
2020-04-18 13:24:10
187.189.61.8 attack
2020-04-18T03:48:42.806853abusebot-2.cloudsearch.cf sshd[22269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-189-61-8.totalplay.net  user=root
2020-04-18T03:48:45.152305abusebot-2.cloudsearch.cf sshd[22269]: Failed password for root from 187.189.61.8 port 55722 ssh2
2020-04-18T03:52:32.924994abusebot-2.cloudsearch.cf sshd[22471]: Invalid user postgres from 187.189.61.8 port 24372
2020-04-18T03:52:32.930947abusebot-2.cloudsearch.cf sshd[22471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-189-61-8.totalplay.net
2020-04-18T03:52:32.924994abusebot-2.cloudsearch.cf sshd[22471]: Invalid user postgres from 187.189.61.8 port 24372
2020-04-18T03:52:35.186528abusebot-2.cloudsearch.cf sshd[22471]: Failed password for invalid user postgres from 187.189.61.8 port 24372 ssh2
2020-04-18T03:56:19.376324abusebot-2.cloudsearch.cf sshd[22711]: Invalid user bf from 187.189.61.8 port 44474
...
2020-04-18 13:45:53
58.150.46.6 attackbotsspam
Invalid user hldms from 58.150.46.6 port 58298
2020-04-18 13:24:39
106.75.246.107 attackbots
$f2bV_matches
2020-04-18 14:00:38
138.255.187.66 attackbotsspam
Port probing on unauthorized port 8080
2020-04-18 13:54:05
62.234.83.138 attackspambots
SSH Brute-Force reported by Fail2Ban
2020-04-18 13:33:11
206.189.3.176 attackbotsspam
Invalid user hf from 206.189.3.176 port 45324
2020-04-18 13:43:17
218.75.210.46 attack
Invalid user administrador from 218.75.210.46 port 21111
2020-04-18 13:45:17
122.152.218.95 attackspam
DATE:2020-04-18 05:56:54, IP:122.152.218.95, PORT:ssh SSH brute force auth (docker-dc)
2020-04-18 13:22:59
222.186.190.14 attack
Apr 18 07:19:50 minden010 sshd[12256]: Failed password for root from 222.186.190.14 port 45250 ssh2
Apr 18 07:19:53 minden010 sshd[12256]: Failed password for root from 222.186.190.14 port 45250 ssh2
Apr 18 07:19:55 minden010 sshd[12256]: Failed password for root from 222.186.190.14 port 45250 ssh2
...
2020-04-18 13:36:23
34.106.24.241 attackspam
(sshd) Failed SSH login from 34.106.24.241 (US/United States/241.24.106.34.bc.googleusercontent.com): 5 in the last 3600 secs
2020-04-18 13:23:30

Recently Reported IPs

35.203.211.165 2606:4700:10::6814:8035 2606:4700:10::6814:9418 2606:4700:10::6816:714
2606:4700:10::6814:7030 88.101.166.9 88.101.166.213 190.145.240.184
92.118.39.194 34.243.42.11 2606:4700:10::ac43:1830 109.162.246.27
2606:4700:10::ac43:2701 2606:4700:10::6814:4615 2606:4700:10::6816:4667 2606:4700:10::6814:4761
2606:4700:10::6816:3297 2606:4700:10::6814:8001 33.244.28.36 195.33.81.114