89.163.157.131

Classification: Malicious

89.163.157.131 is a malicious IP address in Dusseldorf, DE. 16 sightings from 5 threat sources (Mirai, Malware Download), last seen 2026-10-07.

Current activity

  • Command & Control server — Used by cybercriminals to control victim computers.
  • Malware distribution — This indicator is distributing malware.
  • Known attacker — Seen launching attacks over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Malicious Host HoneyDB 2026-10-07 00:00:00 2026-10-07 00:00:00 attacker malicious-activity
Mirai Maltiverse Threat Observatory 2026-10-03 19:27:06 2026-10-05 11:40:23 botnet malicious-activity malware
Mirai ThreatFox Abuse.ch 2026-10-05 01:48:21 2026-10-05 02:25:07 malicious-activity
Generic Malware Maltiverse Threat Observatory 2026-10-03 18:15:17 2026-10-04 14:15:23 malicious-activity malware
Malware Download URLhaus Abuse.ch 2026-10-03 17:30:12 2026-10-04 13:28:17 malicious-activity malware
Proxy IPWhois.io 2026-10-03 17:35:09 2026-10-03 17:35:13 anonymization proxy

Tags

mirai cowrie honeypot elf port:35342 katana x86-64 dot duckdns

Whois information

AS name
AS24961 WIIT AG
Registrant
WIIT AG
City
Dusseldorf
Postal code
40212
Country
DE — Germany 🇩🇪
First indexed
2026-10-03 17:35:03
Last updated
2026-10-08 02:05:45