159.89.20.151
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
No reports in the last 60 days
159.89.20.151 has been reported 14 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
14 from
12 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇩🇪 Paul Smith |
Email Auth Brute force attack 3/2 in last day
|
Brute-Force | |
| 🇯🇵 ki3 |
Fail2Ban: Dovecot Attack 159.89.20.151 1771884020.0(JST)
|
Brute-Force SSH | |
| 🇯🇵 kawanchu |
Brute-force attack via SMTP AUTH. Repeated login failures on mail server.
|
Brute-Force | |
| 🇷🇸 iphouse |
Failed login attempt detected by Fail2Ban in plesk-dovecot jail
|
Web Spam | |
| Anonymous |
automatically banned
|
Brute-Force Email Spam | |
| 🇩🇪 Paul Smith |
Email Auth Brute force attack 1/1 in last day
|
Brute-Force | |
| 🇩🇪 xortex |
brute forces mailboxes
|
Brute-Force | |
| 🇳🇱 stom |
2026-02-23T14:27:08.972072 socky.stom66.co.uk auth[191815]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=159.89.20.151
...
|
Brute-Force Email Spam | |
| 🇳🇱 wlt-blocker |
Attempts to login to mail server with wrong username and/or password
|
Brute-Force | |
| 🇫🇷 debaba |
Feb 23 12:17:14 ichbinaktiv dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<contact@sch
...
|
Spoofing Brute-Force | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/1912 (3 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown