159.89.81.187

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
203 reports
151 reporters ยท latest 1 week ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
๐Ÿ‡บ๐Ÿ‡ธ United States of America
City
North Bergen, New Jersey
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
203 from 151 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 44 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 38 ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands 20
Most common categories Web App Attack 164 Bad Web Bot 69 Hacking 49 Brute-Force 47 Port Scan 13
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡จ๐Ÿ‡ญ TheCoon
Automated: Credential theft attempt - JSON bomb served
Web App Attack Hacking
Anonymous
Web App Attack
๐Ÿ‡จ๐Ÿ‡ญ TheCoon
Automated: Credential theft attempt - JSON bomb served
Web App Attack Hacking
Anonymous
Web App Attack
๐Ÿ‡จ๐Ÿ‡ญ TheCoon
Automated: Credential theft attempt - JSON bomb served
Web App Attack Hacking
Anonymous
Blocked by firewall on hugin [2000/tcp] | Rule: UFW | SPT: 61000 | TTL: 241 | LEN: 44 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
Web App Attack
๐Ÿ‡ง๐Ÿ‡ท Peregrine
Fail2Ban Jail: tomcat-honeypot | Evidence: 159.89.81.187 104.23.190.64 - - [01/Oct/2026:00:48:42 -0300] "GET /.git/config HTTP/1.1" 404 414
Bad Web Bot
๐Ÿ‡ซ๐Ÿ‡ท tecnicorioja
(Mod_security)
Web App Attack Brute-Force Bad Web Bot
Anonymous
159.89.81.187 - - [04/Oct/2026:01:20:49 +0800] "GET /movies/.git/config HTTP/1.1" 200 78910 "-" "Microsoft URL Control - 6.00.8862" ...
Bad Web Bot Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ javierin
Hacking Web App Attack
๐Ÿ‡ฌ๐Ÿ‡ง WebNiraj
(mod_security) mod_security (id:949110) triggered by 159.89.81.187 (US/United States/-): 5 in the last 3600 secs [SIGMA]
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ Starburst SysOp Team
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-mnz6-1)
Hacking Web App Attack
๐Ÿ‡ง๐Ÿ‡ช cmbplf
228 requests with url.path */.git/config 187 requests with url.path *.git/*
Brute-Force Bad Web Bot
๐Ÿ‡ณ๐Ÿ‡ฑ BlueWire Hosting
High-confidence malicious configuration/VCS probe
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡จ๐Ÿ‡ณ 14.155.232.46
๐Ÿ‡ต๐Ÿ‡พ 186.158.200.39
๐Ÿ‡จ๐Ÿ‡ณ 180.100.217.164
๐Ÿ‡ฉ๐Ÿ‡ช 157.22.47.221
๐Ÿ‡ฎ๐Ÿ‡ณ 103.248.120.6
๐Ÿ‡บ๐Ÿ‡ธ 98.101.82.77
๐Ÿ‡บ๐Ÿ‡ธ 74.82.47.17
๐Ÿ‡บ๐Ÿ‡ธ 66.132.172.158
๐Ÿ‡บ๐Ÿ‡ธ 45.136.27.235
๐Ÿ‡ญ๐Ÿ‡ฐ 43.230.8.186
๐Ÿ‡ฉ๐Ÿ‡ช 43.228.157.57
๐Ÿ‡ฎ๐Ÿ‡ฉ 36.64.193.186
๐Ÿ‡บ๐Ÿ‡ธ 34.123.199.59
๐Ÿ‡ฉ๐Ÿ‡ช 8.211.45.42
๐Ÿ‡ฌ๐Ÿ‡ง 5.252.83.130
๐Ÿ‡จ๐Ÿ‡ณ 222.90.233.165
๐Ÿ‡บ๐Ÿ‡ธ 206.189.212.11
๐Ÿ‡บ๐Ÿ‡ธ 195.184.76.105
๐Ÿ‡ซ๐Ÿ‡ท 193.31.126.181
feedback