IP address

Search at other sites:

.00289.163.221.237srv30534.dus7.dedi.server-hosting.expert

Shodan(more info)

Passive DNS

IP blacklists

Echelon SIP register scanner

89.163.221.237 is listed on the Echelon SIP register scanner blacklist.

Description: SIP VoIP registration scanning on port 5060
Type of feed: primary (feed detail page)

Last checked at: 2026-09-05 09:30:00.326000
Was present on blacklist at: 2026-08-30 09:30, 2026-08-31 09:30, 2026-09-01 09:30, 2026-09-02 09:30, 2026-09-03 09:30, 2026-09-04 09:30, 2026-09-05 09:30

Threat categories

TL	Role	Category	Details
38	src	—
33	src	scan	port: 5060

---

Warden events (4)

2026-08-30

AnomalyTraffic (node.ce2b59): 2

ReconScanning (node.ce2b59): 2

DShield reports (IP summary, reports)

2026-08-31

Number of reports: 18

Distinct targets: 13

Residential proxy info (data provided by Layer3 Intel)

Last seen: 2026-09-03 12:21:01}

Percent days seen: 3 %

Networks: PROXY-SELLER, THUNDERPROXY

Details: https://layer3intel.com/context/89.163.221.237

Origin AS

AS24961 - MYLOC-AS

BGP Prefix

89.163.128.0/17

geo

Germany

🕑 Europe/Berlin

hostname

srv30534.dus7.dedi.server-hosting.expert

Address block ('inetnum' or 'NetRange' in whois database)

89.163.128.0 - 89.163.255.255

last_activity

2026-08-30 11:08:57

last_warden_event

2026-08-30 11:08:57

rep

0.0020365197818944525

reserved_range

0

Shodan's InternetDB

Open ports: 22, 80, 443

Tags: –

CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:9.6p1

ts_added

2026-08-30 09:30:03.180000

ts_last_update

2026-09-10 09:30:10.225000

Warden event timeline

DShield event timeline

Presence on blacklists