IP address

Search at other sites:

.12589.163.158.46

Shodan(more info)

Passive DNS

IP blacklists

CI Army

89.163.158.46 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-03-06 03:50:00.974000
Was present on blacklist at: 2026-03-05 03:50, 2026-03-06 03:50

Threat categories

TL	Role	Category	Details
72	src	scan	port: 6170, 9401
25	src	—

---

Warden events (277)

2026-03-05

ReconScanning (node.9c1411): 3

2026-03-04

ReconScanning (node.4dc198): 9

ReconScanning (node.9c1411): 13

2026-03-03

ReconScanning (node.4dc198): 131

ReconScanning (node.9c1411): 22

2026-03-02

ReconScanning (node.9c1411): 26

ReconScanning (node.4dc198): 63

2026-03-01

ReconScanning (node.4dc198): 8

ReconScanning (node.9c1411): 2

DShield reports (IP summary, reports)

2026-03-02

Number of reports: 64

Distinct targets: 52

2026-03-03

Number of reports: 47

Distinct targets: 42

2026-03-04

Number of reports: 77

Distinct targets: 59

2026-03-05

Number of reports: 77

Distinct targets: 59

Origin AS

AS24961 - MYLOC-AS

BGP Prefix

89.163.128.0/17

geo

Germany

🕑 Europe/Berlin

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

89.163.128.0 - 89.163.255.255

last_activity

2026-03-05 05:15:38

last_warden_event

2026-03-05 05:15:38

rep

0.12498604910714285

reserved_range

0

Shodan's InternetDB

Open ports: 135, 137, 139, 445

Tags: –

CPEs: –

ts_added

2026-03-01 22:36:41.692000

ts_last_update

2026-03-13 22:36:50.188000

Warden event timeline

DShield event timeline

Presence on blacklists