JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.89.89.50

Recent Activity

Abuse Confidence Score

56% Elevated

16 reports

16 reporters · latest 28 minutes ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Hostname(s): nyc1-48.barium.do.prod.binaryedge.ninja
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

16 from 16 distinct reporters

First reported

March 16th 2026

Most recent report

28 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 2 🇫🇷 France 2 🇪🇸 Spain 1

Most common categories Hacking 6 Port Scan 6 Brute-Force 3 Web App Attack 3 Ping of Death 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 psauxit	2026-11-15 14:57:04 UTC · (28 minutes ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping	Web App Attack Hacking
🇮🇳 Mr.Singh	2026-11-06 06:30:08 UTC · (1 week ago)	NFT blocked 159.89.89.50 on 06-Nov-2026..	Port Scan Brute-Force
🇪🇸 jiossal	2026-11-06 06:16:29 UTC · (1 week ago)	IP_Trapped_MikroTik_Firewall_HoneyPot	Brute-Force
Anonymous	2026-11-06 05:11:15 UTC · (1 week ago)	Unknown IP-address (NSLookup OK). Maildrop attempt, Auto-reject.	Email Spam Hacking Spoofing
🇹🇷 Domainhizmetleri.com	2026-11-06 04:46:24 UTC · (1 week ago)	Source: DH Hunter (Honeypot) \| Reason: HTTP Probe (8881/tcp) [non-standard port]	Web App Attack
🇺🇸 RAP	2026-11-06 03:29:59 UTC · (1 week ago)	2026-11-06 03:29:59 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
Anonymous	2026-11-06 03:29:20 UTC · (1 week ago)	denied traffic to a honeypot network. destination port 3443.	Port Scan Hacking
🇫🇷 EvoX	2026-11-06 03:00:37 UTC · (1 week ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 4437 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 4437 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 4437 [2] TCP show less	Hacking Bad Web Bot
🇷🇺 Agrohim	2026-10-27 14:30:06 UTC · (2 weeks ago)	Gate B blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇫🇮 dnsbd.tech	2026-10-27 14:02:01 UTC · (2 weeks ago)	nftables: Port scan (TCP:2404) [srv2]	Port Scan Hacking
🇫🇷 security.rdmc.fr	2026-10-27 13:46:18 UTC · (2 weeks ago)	Port Scan Attack proto:TCP src:61010 dst:3306	Port Scan
🇺🇸 ras07	2026-03-16 23:00:13 UTC · (7 months ago)	Brute force SSH login attempts.	Brute-Force SSH
🇫🇷 dispherical	2026-03-16 22:54:35 UTC · (7 months ago)	2026-03-16T23:54:26.048003+01:00 vmi2893862 sshd-session[4002533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.89.50 user=root 2026-03-16T23:54:28.312755+01:00 vmi2893862 sshd-session[4002533]: Fail ... show more 2026-03-16T23:54:26.048003+01:00 vmi2893862 sshd-session[4002533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.89.50 user=root 2026-03-16T23:54:28.312755+01:00 vmi2893862 sshd-session[4002533]: Failed password for root from 159.89.89.50 port 56880 ssh2 2026-03-16T23:54:32.948930+01:00 vmi2893862 sshd-session[4004273]: Invalid user wang from 159.89.89.50 port 56886 2026-03-16T23:54:33.037597+01:00 vmi2893862 sshd-session[4004273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.89.50 2026-03-16T23:54:35.409820+01:00 vmi2893862 sshd-session[4004273]: Failed password for invalid user wang from 159.89.89.50 port 56886 ssh2 ... show less	Brute-Force SSH
🇵🇱 webadmin	2026-03-16 22:54:29 UTC · (7 months ago)	2026-03-16T23:54:20.280036+01:00 tytan sshd-session[679657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.89.50 user=root 2026-03-16T23:54:22.464002+01:00 tytan sshd-session[679657]: Failed password ... show more 2026-03-16T23:54:20.280036+01:00 tytan sshd-session[679657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.89.50 user=root 2026-03-16T23:54:22.464002+01:00 tytan sshd-session[679657]: Failed password for root from 159.89.89.50 port 39108 ssh2 2026-03-16T23:54:22.773446+01:00 tytan sshd-session[679657]: Connection closed by authenticating user root 159.89.89.50 port 39108 [preauth] 2026-03-16T23:54:27.231028+01:00 tytan sshd-session[679713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.89.50 user=root 2026-03-16T23:54:29.123086+01:00 tytan sshd-session[679713]: Failed password for root from 159.89.89.50 port 33108 ssh2 ... show less	Brute-Force SSH
🇺🇸 Like Ma	2026-03-16 22:54:25 UTC · (7 months ago)	2026-03-16T22:54:17.314144+00:00 neverland sshd[776966]: Failed password for root from 159.89.89.50 port 54844 ssh2 2026-03-16T22:54:22.464149+00:00 neverland sshd[776968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru ... show more 2026-03-16T22:54:17.314144+00:00 neverland sshd[776966]: Failed password for root from 159.89.89.50 port 54844 ssh2 2026-03-16T22:54:22.464149+00:00 neverland sshd[776968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.89.50 user=root 2026-03-16T22:54:24.343122+00:00 neverland sshd[776968]: Failed password for root from 159.89.89.50 port 56210 ssh2 ... show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 194.88.98.125

🇳🇱 192.42.116.21

🇺🇸 169.40.57.1

🇹🇼 111.248.156.66

🇯🇵 111.235.76.92

🇧🇩 103.133.206.112

🇮🇩 103.18.76.213

🇺🇸 52.188.184.164

🇵🇱 45.138.12.27

🇳🇱 34.1.239.136

🇺🇸 213.219.254.60

🇿🇦 196.25.123.2

🇸🇬 165.22.254.227

🇺🇸 147.185.132.35

🇬🇧 118.26.104.118

🇨🇳 111.231.226.6

🇨🇳 111.229.43.163

🇨🇳 111.229.21.204

🇷🇸 95.86.51.249

🇩🇪 69.5.169.151