JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.89.81.150

Recent Activity

Abuse Confidence Score

52% Elevated

15 reports

14 reporters · latest 3 days ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 14 distinct reporters

First reported

June 10th 2024

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 3 🇺🇸 United States of America 3 🇫🇷 France 2

Most common categories Port Scan 7 Brute-Force 4 SSH 2 Bad Web Bot 2 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 klaus_ph	2026-11-11 16:22:04 UTC · (3 days ago)	[Wed Nov 11 17:22:03.567050 2026] [reqtimeout:info] [pid 2895901] [client 159.89.81.150:52694] AH01382: Request header read timeout ...	Bad Web Bot
🇺🇸 IndigoRidge	2026-11-09 19:06:24 UTC · (5 days ago)	2026-11-09T14:06:24-0500 DRANNA QUERY GUARD vhost=drannagarrett.com client=159.89.81.150 reason=recursive-vd request="GET /gut-health-and-perimenopause?_vd=8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T%2 ... show more 2026-11-09T14:06:24-0500 DRANNA QUERY GUARD vhost=drannagarrett.com client=159.89.81.150 reason=recursive-vd request="GET /gut-health-and-perimenopause?_vd=8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3FcartTotal%3D0page%2F3%3FcartTotal%3D0page%2F3page%2F8page%2F8page%2F3page%2F3page%2F8page%2F2page%2F3page%2F8page%2F3page%2F2page%2F2page%2F8page%2F8page%2F8page%2F3page%2F3page%2F2page%2F2page%2F3page%2F3page%2F8page%2F3page%2F8page%2F3page%2F2page%2F2page%2F3page%2F8page%2F3page%2F8page%2F2page%2F2page%2F3page%2F2page%2F8page%2F2page%2F3page%2F8page%2F8page%2F8page%2F3page%2F3page%2F2page%2F2page%2F8page%2F3page%2F2page%2F3page%2F8page%2F2page%2F2page%2F3page%2F3page%2F8page%2F3page%2F8page%2F2page%2F3page%2F8page%2F2page%2F8page%2F3page%2F8page%2F2page/2 HTTP/1.1" referer="-" ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-11-05 08:50:32 UTC · (1 week ago)	WEB attack	Brute-Force
🇺🇸 SX Communications	2026-11-03 05:08:50 UTC · (1 week ago)	HTTP application-layer DoS / botnet traffic from 159.89.81.150: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.	DDoS Attack Bad Web Bot Exploited Host
🇧🇷 Host One	2026-10-26 05:00:16 UTC · (2 weeks ago)	T-Pot Honeypot alert: 27 malicious events (exploit_attempt, port_scan) detected.	Port Scan Hacking
🇫🇷 Kejult	2026-10-26 04:57:53 UTC · (2 weeks ago)	Honeypot Finding: repeated TCP service probing on TCP/2000 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.	Port Scan
🇺🇸 xmission.com	2026-10-26 04:46:23 UTC · (2 weeks ago)	Blocked by UFW (TCP on 1177) Source port: 61010 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 159.89.81.150) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
Anonymous	2026-10-25 15:10:33 UTC · (2 weeks ago)	2026-10-23T06:59:29.750739+01:00 [redacted] sshd[1130110]: banner exchange: Connection from 159.89.81.150 port 51064: invalid format 2026-10-23T06:59:29.956557+01:00 [redacted] sshd[1130113]: banner exchange: Connection from 159.89.81.150 port 51078: ... show more 2026-10-23T06:59:29.750739+01:00 [redacted] sshd[1130110]: banner exchange: Connection from 159.89.81.150 port 51064: invalid format 2026-10-23T06:59:29.956557+01:00 [redacted] sshd[1130113]: banner exchange: Connection from 159.89.81.150 port 51078: invalid format show less	Brute-Force SSH
🇩🇪 Jochen Pretli	2026-10-23 08:46:40 UTC · (3 weeks ago)	connection to honeypot	Email Spam Port Scan
Anonymous	2026-10-23 05:59:30 UTC · (3 weeks ago)	2026-10-23T07:59:29.750739+02:00 [redacted] sshd[1130110]: banner exchange: Connection from 159.89.81.150 port 51064: invalid format 2026-10-23T07:59:29.956557+02:00 [redacted] sshd[1130113]: banner exchange: Connection from 159.89.81.150 port 51078: ... show more 2026-10-23T07:59:29.750739+02:00 [redacted] sshd[1130110]: banner exchange: Connection from 159.89.81.150 port 51064: invalid format 2026-10-23T07:59:29.956557+02:00 [redacted] sshd[1130113]: banner exchange: Connection from 159.89.81.150 port 51078: invalid format show less	Brute-Force SSH
🇮🇳 Mr.Singh	2026-10-22 15:30:10 UTC · (3 weeks ago)	NFT blocked 159.89.81.150 after 2 rejections on 22-Oct-2026.	Port Scan Brute-Force
🇫🇷 uthul	2026-10-20 20:23:29 UTC · (3 weeks ago)	T-Pot honeypot: 24 hits on ports [2222] (automated)	Port Scan
🇩🇪 ValtonTahiri	2026-10-20 19:27:32 UTC · (3 weeks ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=159.89.81.150; proto=TCP; source_port=61005; targe ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=159.89.81.150; proto=TCP; source_port=61005; target_port=15000; flags=SYN show less	Port Scan
🇺🇸 kuj	2026-06-29 20:11:55 UTC · (4 months ago)	2026-06-29T14:11:45.371890-06:00 derpamp-oci derper[287106]: 2026/06/29 14:11:45 http: TLS handshake error from 159.89.81.150:11188: acme/autocert: missing server name 2026-06-29T14:11:49.366745-06:00 derpamp-oci derper[287106]: 2026/06/29 14:11:49 h ... show more 2026-06-29T14:11:45.371890-06:00 derpamp-oci derper[287106]: 2026/06/29 14:11:45 http: TLS handshake error from 159.89.81.150:11188: acme/autocert: missing server name 2026-06-29T14:11:49.366745-06:00 derpamp-oci derper[287106]: 2026/06/29 14:11:49 http: TLS handshake error from 159.89.81.150:49448: acme/autocert: host "129.146.38.221" not configured in HostWhitelist 2026-06-29T14:11:55.029043-06:00 derpamp-oci derper[287106]: 2026/06/29 14:11:55 http: TLS handshake error from 159.89.81.150:49470: acme/autocert: host "129.146.38.221" not configured in HostWhitelist ... show less	Port Scan Brute-Force
Anonymous	2024-06-10 02:02:23 UTC · (2 years ago)	Web attack	Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 195.63.26.246

🇺🇦 195.62.36.162

🇵🇱 172.69.155.15

🇫🇮 147.185.133.155

🇺🇸 142.147.163.38

🇨🇳 116.181.16.25

🇨🇳 106.225.192.15

🇺🇸 104.232.216.27

🇩🇪 104.23.219.106

🇪🇸 95.16.200.231

🇺🇸 72.153.153.17

🇺🇸 45.45.237.77

🇸🇦 31.166.9.155

🇨🇳 220.202.112.174

🇪🇹 196.190.181.47

🇩🇪 195.63.26.62

🇩🇪 195.63.24.192

🇺🇸 195.40.106.77

🇫🇮 194.99.27.35

🇪🇸 188.26.211.137