159.89.22.84
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
16 from
15 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇦 Sakusen |
Automated web attack: 7 reqs, 1 paths probed; probed: 1 .php
|
Hacking Web App Attack | |
| 🇵🇱 Budyn |
|
Bad Web Bot Web App Attack | |
| 🇨🇦 1gz |
|
Bad Web Bot | |
| Anonymous |
Automated web scanner. Requested suspicious paths: /wp-login.php. UTC: 2026-11-10 02:19:45.
|
Web App Attack | |
| 🇫🇷 cyber.pandata.ninja |
Suricata IDS detection: ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-2026-60137) M1 [Web Application Attack]. Seen 2026-11-10 UTC.
|
Web App Attack | |
| 🇺🇸 JGouin |
159.89.22.84 [09/Nov/2026:21:25:21 -0500] "GET /wp-login.php HTTP/1.1" 200 tarpit_triggered
...
|
Web App Attack | |
| 🇵🇱 Budyn |
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: elastic.astropot.site | Path: /wp-login.php | User-Agent: Mozilla/5.0 | Request: [Empty / GET Request]
|
Bad Web Bot Web App Attack | |
| 🇨🇿 lp |
anomaly: tcp_port_scan, 501 > threshold 500, repeats 1690 times
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇷🇸 Smel |
SIP/5060 Probe, Scan, BF, Hack -
|
Fraud VoIP Port Scan Hacking Brute-Force | |
| 🇺🇸 kosada.com |
Web vulnerability probing: /wp-content/plugins/ubh/ (bogus vhost/SNI)
|
Web App Attack | |
| 🇺🇸 gerensat |
2023-11-05 11:26:41 | / | [] | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
|
Web App Attack | |
| 🇦🇺 MAGIC |
VM2 Bad user agents ignoring web crawling rules. Draining bandwidth
|
DDoS Attack Bad Web Bot | |
| 🇹🇭 thaizone.com |
Phishing Mail
|
Phishing Email Spam | |
| Anonymous |
postfix blocked attempt from fail2ban
...
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown