159.89.49.48
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- North Bergen, New Jersey
Abuse Reports
Total reports
128 from
50 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 7173)
Source port: 61005
TTL: 240
Packet length: 44
TOS: 0x00
This report (for 159.89.49.48) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 1234
|
Port Scan Hacking Exploited Host | |
| 🇬🇧 sandra361 |
Port scan detected: 7 attempts across 1 port (9999). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=159.89.49.48 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=36678 DF PROTO=TCP SPT=59158 DPT=9999 WINDOW=64240 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇺🇸 MPL |
tcp/15000 (2 or more attempts)
|
Port Scan | |
| 🇳🇱 EGP Abuse Dept |
Scanning for port/service exploits on tpc-003.mach3builders.nl
|
Port Scan Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 29 hits on ports [80, 3000] (automated)
|
Port Scan Web App Attack | |
| Anonymous |
denied traffic to a honeypot network. destination port 8882.
|
Port Scan Hacking | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 26 malicious events (exploit_attempt, port_scan) detected.
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
|
Web App Attack | |
| 🇧🇷 Host One |
Detected by T-Pot honeypot: behavioral attack detected
|
Port Scan SSH | |
| 🇺🇸 donarev419 |
Connection to port 10000 with data transfer.
Data preview: GET / HTTP/1.1
Host: 67.215.244.172
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20
|
Port Scan Hacking | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan | |
| 🇫🇮 nNordic |
Connection attempt blocked by IDS/IPS from 159.89.49.48/32
|
Hacking | |
| 🇺🇸 MPL |
tcp/3389
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown