Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 159.89.85.154:
This IP address has been reported a total of
124
times from
110 distinct
sources.
159.89.85.154 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 30
reports;
France
with 25
reports;
United States of America
with 14
reports.
The most common categories in these recent reports were:
Brute-Force
113
times;
SSH
110
times;
Port Scan
7
times;
Hacking
5
times;
FTP Brute-Force
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Sep 7 17:12:44 mail sshd[2221493]: Failed password for root from 159.89.85.154 port 59408 ssh2
Sep ...
show moreSep 7 17:12:44 mail sshd[2221493]: Failed password for root from 159.89.85.154 port 59408 ssh2
Sep 7 17:12:45 mail sshd[2221500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.85.154 user=root
Sep 7 17:12:47 mail sshd[2221500]: Failed password for root from 159.89.85.154 port 40024 ssh2
...
show less
2026-09-07T18:11:54.495518 webhost1 sshd-session[73356]: Connection closed by authenticating user ro ...
show more2026-09-07T18:11:54.495518 webhost1 sshd-session[73356]: Connection closed by authenticating user root 159.89.85.154 port 37510 [preauth]
2026-09-07T18:11:55.045635 webhost1 sshd-session[73374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.85.154 user=root
2026-09-07T18:11:57.173614 webhost1 sshd-session[73374]: Failed password for root from 159.89.85.154 port 47524 ssh2
...
show less
SSH Bruteforce Attempt. SSH honeypot on port 22 recorded 1 failed login attempt(s). Usernames tried: ...
show moreSSH Bruteforce Attempt. SSH honeypot on port 22 recorded 1 failed login attempt(s). Usernames tried: root. Client: SSH-2.0-Go. Last attempt: 2026-09-07T19:08:47+02:00.
show less
2026-09-07T19:08:23.805573+02:00 serv1.blumental-server.de sshd-session[380260]: Failed password for ...
show more2026-09-07T19:08:23.805573+02:00 serv1.blumental-server.de sshd-session[380260]: Failed password for root from 159.89.85.154 port 48482 ssh2
2026-09-07T19:08:25.475993+02:00 serv1.blumental-server.de sshd-session[380278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.85.154 user=root
2026-09-07T19:08:27.108742+02:00 serv1.blumental-server.de sshd-session[380278]: Failed password for root from 159.89.85.154 port 60586 ssh2
...
show less
Sep 7 17:08:20 Veslys sshd[2563842]: Failed password for root from 159.89.85.154 port 37532 ssh2
Se ...
show moreSep 7 17:08:20 Veslys sshd[2563842]: Failed password for root from 159.89.85.154 port 37532 ssh2
Sep 7 17:08:21 Veslys sshd[2566416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.85.154 user=root
Sep 7 17:08:23 Veslys sshd[2566416]: Failed password for root from 159.89.85.154 port 47592 ssh2
...
show less
2026-09-07T19:01:52.992143+02:00 milkyway sshd[1996770]: Failed password for root from 159.89.85.154 ...
show more2026-09-07T19:01:52.992143+02:00 milkyway sshd[1996770]: Failed password for root from 159.89.85.154 port 46256 ssh2
2026-09-07T19:01:54.984751+02:00 milkyway sshd[1996780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.85.154 user=root
2026-09-07T19:01:56.939308+02:00 milkyway sshd[1996780]: Failed password for root from 159.89.85.154 port 56248 ssh2
...
show less
SSH honeypot (Cowrie) recorded 25 events over 71m. Activity: SSH connection to honeypot; SSH credent ...
show moreSSH honeypot (Cowrie) recorded 25 events over 71m. Activity: SSH connection to honeypot; SSH credential brute-force; automated SSH client (scanner banner); post-auth command execution; root credential accepted; successful honeypot login. Usernames tried: Can't open iakk, Can't open usa, cat, root. Passwords tried: 123456, No such file or directory at ./s, password, root. Commands: uname -a 2>/dev/null Wazuh rules: 100100,100101,100102,100103,100106,100117.
show less
2026-09-07T18:59:29.508814+02:00 server sshd[260448]: Failed password for root from 159.89.85.154 po ...
show more2026-09-07T18:59:29.508814+02:00 server sshd[260448]: Failed password for root from 159.89.85.154 port 51478 ssh2
2026-09-07T18:59:31.662280+02:00 server sshd[260892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.85.154 user=root
2026-09-07T18:59:32.985905+02:00 server sshd[260892]: Failed password for root from 159.89.85.154 port 33094 ssh2
show less
2026-09-07T18:59:20.644927+02:00 alcyone sshd-session[2209574]: Failed password for root from 159.89 ...
show more2026-09-07T18:59:20.644927+02:00 alcyone sshd-session[2209574]: Failed password for root from 159.89.85.154 port 59542 ssh2
2026-09-07T18:59:23.491093+02:00 alcyone sshd-session[2209577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.85.154 user=root
2026-09-07T18:59:25.589659+02:00 alcyone sshd-session[2209577]: Failed password for root from 159.89.85.154 port 44936 ssh2
...
show less
2026-09-07T16:57:27.463831+00:00 mercury.fsmail.org.uk sshd-session[1677088]: Failed password for ro ...
show more2026-09-07T16:57:27.463831+00:00 mercury.fsmail.org.uk sshd-session[1677088]: Failed password for root from 159.89.85.154 port 58834 ssh2
2026-09-07T16:57:28.717685+00:00 mercury.fsmail.org.uk sshd-session[1677091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.85.154 user=root
2026-09-07T16:57:30.830967+00:00 mercury.fsmail.org.uk sshd-session[1677091]: Failed password for root from 159.89.85.154 port 40784 ssh2
...
show less
