JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.89.50.154

Activity Trending Down

Abuse Confidence Score

11% Caution

36 reports

33 reporters · latest 1 month ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

36 from 33 distinct reporters

First reported

March 10th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 1 🇭🇰 Hong Kong 1 🇺🇸 United States of America 1

Most common categories Port Scan 3 Hacking 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 OceanTreasure	2026-09-24 12:10:14 UTC · (1 month ago)	tcp/3306; SCAN Suspicious inbound to mySQL port 3306 @ 2026-09-24T12:01:13Z	Port Scan
🇭🇰 CyberFox	2026-09-24 11:54:35 UTC · (1 month ago)	6931/tcp (1 or more attempts)	Port Scan
Anonymous	2026-09-24 11:49:05 UTC · (1 month ago)	denied traffic to a honeypot network. destination port 7777.	Port Scan Hacking
🇹🇷 rtbh.com.tr	2026-03-20 20:12:13 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-19 20:12:09 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-03-19 12:45:54 UTC · (7 months ago)	Port Scanner	Port Scan
🇫🇷 etienne	2026-03-19 12:30:58 UTC · (7 months ago)	Mar 19 12:30:46 Thrain6 sshd[2749803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.50.154 user=root Mar 19 12:30:48 Thrain6 sshd[2749803]: Failed password for root from 159.89.50.154 port 60830 ssh2 ... show more Mar 19 12:30:46 Thrain6 sshd[2749803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.50.154 user=root Mar 19 12:30:48 Thrain6 sshd[2749803]: Failed password for root from 159.89.50.154 port 60830 ssh2 Mar 19 12:30:52 Thrain6 sshd[2749830]: Invalid user steam from 159.89.50.154 port 58238 Mar 19 12:30:55 Thrain6 sshd[2749830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.50.154 Mar 19 12:30:57 Thrain6 sshd[2749830]: Failed password for invalid user steam from 159.89.50.154 port 58238 ssh2 ... show less	Brute-Force
🇩🇪 NetWatch	2026-03-19 12:30:33 UTC · (7 months ago)	The IP 159.89.50.154 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇩🇪 ghostwarriors	2026-03-19 04:20:39 UTC · (7 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇷🇸 Scan	2026-03-19 04:17:39 UTC · (7 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇫🇮 pr0vieh	2026-03-19 04:03:54 UTC · (7 months ago)	2026-03-19T04:03:32.779759+00:00 Linux101 sshd[2011176]: Failed password for root from 159.89.50.154 port 38204 ssh2 2026-03-19T04:03:36.313792+00:00 Linux101 sshd[2012065]: Invalid user vic from 159.89.50.154 port 38212 2026-03-19T04:03:36.722444+00 ... show more 2026-03-19T04:03:32.779759+00:00 Linux101 sshd[2011176]: Failed password for root from 159.89.50.154 port 38204 ssh2 2026-03-19T04:03:36.313792+00:00 Linux101 sshd[2012065]: Invalid user vic from 159.89.50.154 port 38212 2026-03-19T04:03:36.722444+00:00 Linux101 sshd[2012065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.50.154 2026-03-19T04:03:39.506632+00:00 Linux101 sshd[2012065]: Failed password for invalid user vic from 159.89.50.154 port 38212 ssh2 2026-03-19T04:03:43.090474+00:00 Linux101 sshd[2013176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.50.154 user=root 2026-03-19T04:03:44.499515+00:00 Linux101 sshd[2013176]: Failed password for root from 159.89.50.154 port 41582 ssh2 2026-03-19T04:03:48.173562+00:00 Linux101 sshd[2014116]: Invalid user a from 159.89.50.154 port 41592 2026-03-19T04:03:48.876414+00:00 Linux101 sshd[2014116]: pam_unix(sshd:auth): authentication failure; ... show less	Brute-Force SSH
🇨🇦 takikawa.b-l.ca	2026-03-19 04:03:27 UTC · (7 months ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 dchu096	2026-03-19 04:03:18 UTC · (7 months ago)	2026-03-18T21:03:15.462825-07:00 lavalink.lv.dchu096.me sshd[1937035]: Invalid user flow from 159.89.50.154 port 47038 2026-03-18T21:03:15.718370-07:00 lavalink.lv.dchu096.me sshd[1937035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 2026-03-18T21:03:15.462825-07:00 lavalink.lv.dchu096.me sshd[1937035]: Invalid user flow from 159.89.50.154 port 47038 2026-03-18T21:03:15.718370-07:00 lavalink.lv.dchu096.me sshd[1937035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.50.154 2026-03-18T21:03:17.952562-07:00 lavalink.lv.dchu096.me sshd[1937035]: Failed password for invalid user flow from 159.89.50.154 port 47038 ssh2 ... show less	Brute-Force SSH
🇺🇸 ne1for23	2026-03-19 04:00:52 UTC · (7 months ago)	Unauthorized access to SSH at 19/Mar/2026:04:00:51 +0000.	Port Scan SSH
🇺🇸 Cyber Crusader	2026-03-18 21:00:16 UTC · (7 months ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.161

🇳🇱 193.47.62.69

🇬🇧 193.32.209.254

🇦🇷 181.23.250.56

🇺🇸 173.230.155.151

🇩🇪 172.70.246.194

🇩🇪 94.183.174.99

🇳🇱 77.239.124.44

🇺🇸 64.62.197.17

🇳🇱 4.231.98.231

🇺🇸 199.165.159.21

🇩🇪 195.63.25.127

🇩🇪 172.70.247.43

🇩🇪 144.76.185.173

🇻🇳 116.99.169.71

🇫🇷 91.231.89.184

🇺🇸 65.49.1.36

🇨🇳 43.139.26.4

🇨🇳 39.107.136.130

🇬🇧 35.203.210.168