JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 89.169.54.197

89.169.54.197 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 0%: ?

ISP	AEZA GROUP LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210644
Domain Name	aeza.ru
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 89.169.54.197

Whois 89.169.54.197

IP Abuse Reports for 89.169.54.197:

This IP address has been reported a total of 139 times from 106 distinct sources. 89.169.54.197 was first reported on January 8th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:04:10 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-10 00:42:42 (2 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/89.169.54.197	SSH
🇦🇹 urnilxfgbez	2026-04-09 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 COMAITE	2026-04-09 17:12:19 (2 months ago)	Honeypot login success	Brute-Force
Anonymous	2026-04-09 14:55:58 (2 months ago)	Drop from IP address 89.169.54.197 to tcp-port 22	Port Scan
🇫🇮 iamxorum	2026-04-09 13:26:48 (2 months ago)	2026-04-09T13:22:07.042991+00:00 XRM-01 endlessh[810]: 2026-04-09T13:22:07.042Z ACCEPT host=::ffff:8 ... show more 2026-04-09T13:22:07.042991+00:00 XRM-01 endlessh[810]: 2026-04-09T13:22:07.042Z ACCEPT host=::ffff:89.169.54.197 port=55064 fd=4 n=1/4096 2026-04-09T13:24:27.207279+00:00 XRM-01 endlessh[810]: 2026-04-09T13:24:27.206Z ACCEPT host=::ffff:89.169.54.197 port=39920 fd=5 n=2/4096 2026-04-09T13:24:37.173224+00:00 XRM-01 endlessh[810]: 2026-04-09T13:24:37.172Z CLOSE host=::ffff:89.169.54.197 port=55064 fd=4 time=150.130 bytes=258 2026-04-09T13:26:37.296448+00:00 XRM-01 endlessh[810]: 2026-04-09T13:26:37.295Z ACCEPT host=::ffff:89.169.54.197 port=35694 fd=6 n=3/4096 2026-04-09T13:26:47.251813+00:00 XRM-01 endlessh[810]: 2026-04-09T13:26:47.251Z CLOSE host=::ffff:89.169.54.197 port=39920 fd=5 time=140.045 bytes=258 ... show less	Brute-Force SSH
🇭🇰 bing	2026-04-09 06:17:49 (2 months ago)	2026-04-09T06:17:46.769776 yxvm-8273160 sshd[1862477]: pam_unix(sshd:auth): authentication failure; ... show more 2026-04-09T06:17:46.769776 yxvm-8273160 sshd[1862477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.169.54.197 user=root 2026-04-09T06:17:48.864958 yxvm-8273160 sshd[1862477]: Failed password for root from 89.169.54.197 port 33862 ssh2 ... show less	Brute-Force SSH
🇫🇷 sthoyer.de	2026-04-09 05:42:49 (2 months ago)	Apr 9 07:42:48 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Apr 9 07:42:48 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=89.169.54.197 DST=173.212.223.67 LEN=60 TOS=0x08 PREC=0x20 TTL=52 ID=43437 DF PROTO=TCP SPT=36324 DPT=22 WINDOW=42340 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 EGP Abuse Dept	2026-04-09 05:04:13 (2 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇹🇷 rtbh.com.tr	2026-04-09 04:12:23 (2 months ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
🇺🇸 MPL	2026-04-09 04:02:23 (2 months ago)	tcp/22	Port Scan
🇫🇷 NXO WAN	2026-04-09 02:07:27 (2 months ago)	SSH unauthorized access	Brute-Force SSH
🇺🇸 MPL	2026-04-09 00:39:58 (2 months ago)	tcp/22 (4 or more attempts)	Port Scan
🇫🇷 pr0vieh	2026-04-08 23:37:38 (2 months ago)	2026-04-09T01:37:21.137403+02:00 Linux09 sshd[5553]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-04-09T01:37:21.137403+02:00 Linux09 sshd[5553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.169.54.197 user=root 2026-04-09T01:37:22.936015+02:00 Linux09 sshd[5553]: Failed password for root from 89.169.54.197 port 49272 ssh2 2026-04-09T01:37:24.739905+02:00 Linux09 sshd[5594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.169.54.197 user=root 2026-04-09T01:37:27.035846+02:00 Linux09 sshd[5594]: Failed password for root from 89.169.54.197 port 53816 ssh2 2026-04-09T01:37:28.240777+02:00 Linux09 sshd[5617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.169.54.197 user=root 2026-04-09T01:37:30.135949+02:00 Linux09 sshd[5617]: Failed password for root from 89.169.54.197 port 53828 ssh2 2026-04-09T01:37:31.749587+02:00 Linux09 sshd[5662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.169.54.197 user=ro ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-04-08 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 185.255.212.78

🇨🇳 171.222.248.48

🇨🇳 171.37.191.156

🇺🇸 148.153.56.170

🇳🇱 45.148.10.152

🇦🇺 34.40.250.126

🇺🇸 20.163.32.78

🇧🇷 170.254.194.17

🇧🇷 170.246.164.252

🇩🇪 158.101.161.27

🇭🇰 156.251.179.157

🇺🇸 146.88.240.71

🇮🇳 143.110.181.226

🇮🇷 62.60.204.25

🇺🇸 44.120.181.105

🇻🇳 14.224.227.189

🇭🇰 2404:6800:4005:c01::12a

🇨🇴 170.246.112.126

🇧🇷 170.245.25.41

🇧🇷 170.238.191.202