159.89.0.181
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Hostname(s)
- ssh-scan-0.io.internetdata.io
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
75 from
66 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 bancix |
Heimdallr NIDS: Automatic ban triggered. Reason: TRAP_PORT_HIT (porta 22)
|
Port Scan | |
| Anonymous |
Connection attempt to the outside SSH honeypot on port 22. Administrative SSH uses a different port. IP blocked centrally for 1 hour. Detection rule: 100126.
|
Port Scan | |
| 🇬🇧 BananaLlama |
Unsolicited SSH (TCP/22) connection attempts blocked at edge firewall; no public SSH service is exposed.
|
Port Scan SSH | |
| 🇬🇧 Stuart Reid |
...
|
SSH | |
| 🇺🇸 MPL |
tcp/22 (4 or more attempts)
|
Port Scan | |
| Anonymous |
Trying ports that it shouldn't be.
|
Port Scan Hacking Exploited Host | |
| 🇳🇱 soverin |
Network scan on port 22
|
Email Spam | |
| 🇩🇪 SiyCah |
159.89.0.181 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 453B. Report generated by Endlessh Report Generator v1.2.3
|
Brute-Force Port Scan SSH Hacking | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇩🇪 D3vNu11 |
Level: (LOW): Ssh Abuse via Cowrie IOC Country: Germany 1x -> Target Country: Germany SSH
|
Brute-Force SSH | |
| 🇵🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 241 | Len: 40B | Win: 65535(1) | rDNS: ssh-scan-0.io.internetdata.io | F2B/ufw-honeypot@2026-11-07T05:53:27Z
|
Port Scan Hacking | |
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 159.89.0.181 to port 22 (ger-01) [SSH]
|
Exploited Host | |
| 🇹🇷 savasboluk |
Auto-blocked by Seczar SecureOps — SSH Brute Force (7 events in 5min) at 2026-11-07 05:33
|
SSH Brute-Force | |
| 🇧🇬 Ilcheff |
SSH tarpit hit: connection from ssh-scan-0.io.internetdata.io [DE/Germany, AS14061] to SSH accepted.
|
Port Scan Brute-Force SSH | |
| 🇳🇱 rmvanderspek |
SSH Brute-force attempt detected.
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown