JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.6.36

159.89.6.36 was found in our database!

This IP was reported 272 times. Confidence of Abuse is 31%: ?

31%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.6.36

Whois 159.89.6.36

IP Abuse Reports for 159.89.6.36:

This IP address has been reported a total of 272 times from 110 distinct sources. 159.89.6.36 was first reported on July 11th 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 gbzret4d	2026-04-28 04:51:38 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 11615 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 11615 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 11615 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-04-27 05:46:34 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 11225 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 11225 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 11225 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-04-26 15:46:42 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 11005 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 11005 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 11005 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-04-26 12:53:22 (1 month ago)	tcp/18789	Port Scan
Anonymous	2026-04-26 08:56:24 (1 month ago)	2026-04-26T09:56:23.210754+01:00 vps kernel: [38933985.699670] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-04-26T09:56:23.210754+01:00 vps kernel: [38933985.699670] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=159.89.6.36 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=113 ID=41331 DF PROTO=TCP SPT=18168 DPT=18789 WINDOW=65280 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 2MP	2026-04-25 17:19:37 (1 month ago)	Honeypot [gcp-tpot]: HTTP/1.1 request on 4902 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64 ... show more Honeypot [gcp-tpot]: HTTP/1.1 request on 4902 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 4902 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇫🇮 nNordic	2026-04-25 08:41:40 (1 month ago)	Connection attempt blocked by IDS/IPS from 159.89.6.36/32	Hacking
🇺🇸 MPL	2026-04-25 07:38:01 (1 month ago)	tcp/8883 (2 or more attempts)	Port Scan
🇺🇸 NXTwoThou	2026-04-25 06:28:07 (1 month ago)	Verb	Web App Attack
🇳🇱 f14driver	2026-04-24 05:53:15 (1 month ago)	...	Brute-Force SSH Port Scan Web App Attack
🇬🇧 gbzret4d	2026-04-24 00:34:03 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 10043 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 10043 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 10043 [1] TCP show less	Hacking Bad Web Bot
🇨🇳 pengpeng	2026-04-23 20:53:51 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 10986 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 10986 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇵 radheykrishna.com.np	2026-04-22 23:39:42 (1 month ago)	Apr 23 05:24:41 kernel: [390886.433562] [UFW BLOCK] IN=ens160 OUT= SRC=159.89.6.36 LEN=44 TOS=0x00 P ... show more Apr 23 05:24:41 kernel: [390886.433562] [UFW BLOCK] IN=ens160 OUT= SRC=159.89.6.36 LEN=44 TOS=0x00 PREC=0x00 TTL=118 ID=41544 DF PROTO=TCP SPT=18251 DPT=18789 WINDOW=65280 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇳 pengpeng	2026-04-22 12:50:41 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 9674 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇬🇧 gbzret4d	2026-04-22 05:10:04 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 9293 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0 ... show more Honeypot [uk-production01]: HTTP/1.1 request on 9293 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 9293 [1] TCP show less	Hacking Bad Web Bot

Showing 1 to 15 of 272 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2401:4900:9272:3a11:7437:6a81:fa72:2a67

🇧🇷 205.210.31.241

🇳🇱 176.65.139.233

🇵🇱 146.59.1.225

🇺🇸 144.91.207.226

🇫🇷 83.171.226.124

🇺🇸 69.55.59.200

🇮🇳 49.43.132.163

🇺🇸 48.217.108.244

🇩🇪 43.228.157.133

🇨🇳 42.51.41.137

🇺🇸 2a03:2880:18ff:55::

🇧🇪 198.235.24.166

🇳🇱 170.168.61.69

🇦🇪 165.154.12.82

🇺🇸 147.185.132.60

🇮🇩 124.40.252.3

🇺🇸 71.6.134.237

🇯🇵 20.153.204.5

🇺🇸 2a03:2880:18ff:53::