159.89.104.120
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
No reports in the last 60 days
159.89.104.120 has been reported 45 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
45 from
35 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Blocked: Reason='Auto-block via DW'; Requests=0
|
Hacking | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/159.89.104.120
2025-11-26 04:46:14 /owa/auth/15.0.1130/themes/resources/favicon.ico
2025-11-26 04:46:13 /
|
Web App Attack | |
| 🇺🇸 MPL |
tcp ports: 80,8443 (5 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/5000
|
Port Scan | |
| 🇺🇸 MPL |
tcp/5000 (2 or more attempts)
|
Port Scan | |
| 🇫🇷 Pythagus |
Aggressive web scan
|
SQL Injection Bad Web Bot Web App Attack | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/159.89.104.120
|
SSH | |
| Anonymous |
$f2bV_matches
|
Brute-Force SSH | |
| Anonymous |
SSH-Multi login Attempt
|
Brute-Force SSH | |
| 🇨🇦 Largnet SOC |
159.89.104.120 triggered Icarus honeypot on port 22. Check us out on github.
|
Port Scan Hacking | |
| 🇬🇧 spamverify.com |
Honeypot Hit: Port Scan (23) TELNET
|
Web Spam Blog Spam Bad Web Bot Web App Attack | |
| 🇬🇧 spamverify.com |
Honeypot Hit: Port Scan (445) SMB
|
Web Spam Blog Spam Bad Web Bot Web App Attack | |
| 🇩🇪 Phenix Info |
SmallGuard.fr - Empty User Agent
|
Web App Attack | |
| 🇺🇸 gu-alvareza |
Nmap.Script.Scanner
|
Port Scan | |
| Anonymous |
DirectAdmin Auto Report (mail.log)
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown