159.89.0.181

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
86 reports
73 reporters ยท latest 23 hours ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
๐Ÿ‡ฉ๐Ÿ‡ช Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
86 from 73 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 21 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 15 ๐Ÿ‡ซ๐Ÿ‡ท France 11
Most common categories SSH 52 Port Scan 47 Brute-Force 38 Hacking 13 Exploited Host 8
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡ง๐Ÿ‡ท radardatelecom
Blocked by Radar da Telecom firewall โ€” abuseipdb
Bad Web Bot Web App Attack
๐Ÿ‡ฎ๐Ÿ‡ช RoboSOC
Port 22 Scan, PTR: None
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ NetVexor
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan Hacking Brute-Force
๐Ÿ‡จ๐Ÿ‡ฆ dpinse
Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 22/SSH โ€ข Client: SSH-2.0-internetdata.io
SSH Port Scan
๐Ÿ‡บ๐Ÿ‡ธ ras07
Brute force SSH login attempts.
Brute-Force SSH
๐Ÿ‡ฉ๐Ÿ‡ช D3vNu11
Level: (LOW): Ssh Abuse via Cowrie IOC Country: Germany 1x -> Target Country: Polen SSH
Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ฎ dnsbd.tech
nftables: Port scan (TCP:22) [srv2]
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-11-07 09:58:06 UTC Unauthorized activity to TCP port 22. SSH
SSH
๐Ÿ‡ฉ๐Ÿ‡ช bancix
Heimdallr NIDS: Automatic ban triggered. Reason: TRAP_PORT_HIT (porta 22)
Port Scan
Anonymous
Connection attempt to the outside SSH honeypot on port 22. Administrative SSH uses a different port. IP blocked centrally for 1 hour. Detection rule: 100126.
Port Scan
๐Ÿ‡ฌ๐Ÿ‡ง BananaLlama
Unsolicited SSH (TCP/22) connection attempts blocked at edge firewall; no public SSH service is exposed.
Port Scan SSH
๐Ÿ‡ซ๐Ÿ‡ท uthul
T-Pot honeypot: 7 hits on ports [22] (automated)
Port Scan Brute-Force SSH
๐Ÿ‡ฌ๐Ÿ‡ง Stuart Reid
...
SSH
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/22 (4 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฆ๐Ÿ‡น 2a02:26f0:dc::6853:5a0
๐Ÿ‡ณ๐Ÿ‡ฑ 193.47.62.81
๐Ÿ‡ธ๐Ÿ‡ฎ 130.12.181.246
๐Ÿ‡ซ๐Ÿ‡ท 51.178.111.227
๐Ÿ‡บ๐Ÿ‡ธ 45.79.190.36
๐Ÿ‡ฎ๐Ÿ‡ณ 203.145.165.2
๐Ÿ‡บ๐Ÿ‡ฆ 194.44.90.250
๐Ÿ‡จ๐Ÿ‡ด 190.242.100.197
๐Ÿ‡ง๐Ÿ‡ท 129.148.40.20
๐Ÿ‡บ๐Ÿ‡ธ 103.89.14.116
๐Ÿ‡ฎ๐Ÿ‡น 192.71.26.73
๐Ÿ‡ฉ๐Ÿ‡ช 167.99.255.26
๐Ÿ‡ธ๐Ÿ‡ฌ 165.22.49.207
๐Ÿ‡จ๐Ÿ‡ณ 123.121.122.125
๐Ÿ‡ณ๐Ÿ‡ฑ 93.123.109.80
๐Ÿ‡ฏ๐Ÿ‡ต 59.166.119.139
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.141
๐Ÿ‡ง๐Ÿ‡ช 35.240.6.16
๐Ÿ‡บ๐Ÿ‡ฆ 31.43.255.134
๐Ÿ‡ท๐Ÿ‡ด 141.98.83.48
feedback