159.89.24.117

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
62 reports
30 reporters · latest 1 week ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
62 from 30 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 8 🇫🇷 France 8 🇺🇸 United States of America 6
Most common categories Port Scan 18 Hacking 13 Brute-Force 11 Web App Attack 8 SSH 5
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 gu-alvareza
Nmap.Script.Scanner
Port Scan
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 13 payload-bearing connection/event(s), 866 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 11434.
Port Scan Hacking
🇻🇳 cblitvn
Winmail Server Automated Defense v4.6.9: Blocked IP for ProtocolAbuse:5 (Total bad events in 24h: 9).
Port Scan Hacking
🇫🇷 Thaliruth
Oct 31 18:04:47 151 postfix/smtpd[2743991]: lost connection after CONNECT from unknown[159.89.24.117] ...
Hacking Brute-Force
Anonymous
Kept connecting and disconnecting without issuing any commands
DDoS Attack
🇺🇸 wk5h
Honeypot (T-Pot), last 24h: 13 hits. Services: Honeytrap.
Port Scan
Anonymous
Hacking Attempt
Hacking Web App Attack
🇵🇱 sefinek.net
Honeypot hit: Unauthorized traffic (4 bytes of payload); 8000 [16] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Port Scan
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
Anonymous
159.89.24.117 - - [31/Oct/2026:06:46:53 +0100] "GET / HTTP/1.0" 402 4791 "-" "-" ...
Web App Attack
🇮🇪 AutosOnShow
blocked for webapp attack | path requested: / | seen at 2026-10-31 04:20:36.152 |
Web App Attack
🇩🇪 patrisei
You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-probing
Port Scan Web App Attack
🇩🇪 mailox
SSH Unauthorized connection attempt ...
Brute-Force SSH
🇦🇪 abusiveIntelligence
RDP connect attempt: Nmap Scanner
Brute-Force
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 13 payload-bearing connection/event(s), 866 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 8086.
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.127
🇺🇸 216.25.90.6
🇺🇦 185.17.124.213
🇮🇩 103.166.11.24
🇷🇺 82.116.60.184
🇧🇪 35.210.8.195
🇮🇹 2.239.19.105
🇰🇷 218.157.163.203
🇧🇷 191.240.36.93
🇺🇸 154.30.73.109
🇧🇷 151.242.149.155
🇪🇸 83.165.96.35
🇺🇦 37.221.138.52
🇺🇬 196.0.24.114
🇳🇱 195.178.110.108
🇺🇸 192.81.208.63
🇨🇳 113.108.122.171
🇳🇬 102.88.137.80
🇭🇰 45.207.209.16
🇵🇱 45.138.12.46
feedback