159.89.8.211
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
27 from
20 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇪🇸 raiolanetworks.com |
Honeypot detection: port scan / service probe. 4 events observed. Reported automatically from a honeypot sensor.
|
Port Scan | |
| 🇺🇸 chronos |
|
Brute-Force Email Spam Spoofing Phishing Hacking | |
| Anonymous |
110/tcp (1 or more attempts)
|
Port Scan | |
| 🇺🇸 gu-alvareza |
Nmap.Script.Scanner
|
Port Scan | |
| 🇩🇪 Kejult |
Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activity observed.
|
Hacking | |
| 🇬🇧 Andrew |
2026-10-13T02:35:45.155295+00:00 Debian sshd-session[1402720]: kex_exchange_identification: Connection closed by remote host
2026-10-13T02:35:45.155330+00:00 Debian sshd-session[1402720]: Connection closed by 159.89.8.211 port 27925
...
|
Port Scan Hacking Brute-Force SSH | |
| 🇳🇱 donarev419 |
Port scan detected on port 587 (connection without data transfer)
|
Port Scan | |
| Anonymous |
|
Email Spam Brute-Force | |
| 🇫🇷 spot |
|
Brute-Force Exploited Host | |
| 🇳🇱 donarev419 |
Port scan detected on port 18789 (connection without data transfer)
|
Port Scan | |
| 🇮🇪 thecivvie |
foomuuri firewall banned tcp/23 3 attempts
|
Brute-Force | |
| Anonymous |
Kept connecting and disconnecting without issuing any commands
|
DDoS Attack | |
| 🇨🇳 WMK965 |
|
Port Scan Web App Attack | |
| 🇭🇰 CyberFox |
18789/tcp (1 or more attempts)
|
Port Scan | |
| 🇺🇸 donarev419 |
Port scan detected on port 2525 (connection without data transfer)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown