159.89.229.252
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- North Bergen, New Jersey
Abuse Reports
Total reports
12 from
11 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Unauthorized connection to RDP port 3389
|
Port Scan | |
| 🇫🇷 EvoX |
|
Hacking Bad Web Bot | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇫🇷 Petre 21_ip |
|
Port Scan | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized mongod/tcp traffic (dst port 27017, src port 60406) against a passive decoy service with no legitimate function, consistent with automated scanning.
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-15 11:20:42 UTC Unauthorized activity to TCP port 8088. Web App
|
Port Scan Web App Attack | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [6543/tcp]
Source port: 61000
TTL: 242
Packet length: 44
|
Port Scan | |
| 🇺🇸 dotnetdork |
SSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Consistent with automated SSH scanning/brute-force. Reported by dotnetdork.dev security honeypot.
|
Brute-Force SSH | |
| Anonymous |
denied traffic to a honeypot network. destination port 27017.
|
Port Scan Hacking | |
| 🇧🇾 stroytrest |
2026-10-11T13:47:24.033970+03:00 gate kernel: [777933.923624] nftables: JAIL-SQL IN=wan OUT= MAC= SRC=159.89.229.252 DST=xxx.xxx.xxx.xxx LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=39176 PROTO=TCP SPT=61011 DPT=5432 WINDOW=1025 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 8047
|
Port Scan Hacking Exploited Host | |
| 🇨🇴 juan_mesa |
Unauthorized connection attempts to SSH TCP/2222 on 1 MikroTik router(s) (blocked by firewall).
|
Port Scan SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown