JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.35.94.89

161.35.94.89 was found in our database!

This IP was reported 267 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.35.94.89

Whois 161.35.94.89

IP Abuse Reports for 161.35.94.89:

This IP address has been reported a total of 267 times from 56 distinct sources. 161.35.94.89 was first reported on October 18th 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-04-25 04:54:31 (2 months ago)	tcp/8081	Port Scan
🇺🇸 MPL	2026-04-25 04:34:02 (2 months ago)	tcp ports: 8443,8081 (2 or more attempts)	Port Scan
🇨🇦 Sayrix	2025-11-30 19:49:56 (7 months ago)	2025-11-30T19:48:49.709046+00:00 LOFI-BHS-1 sshd[2201721]: Invalid user es from 161.35.94.89 port 47 ... show more 2025-11-30T19:48:49.709046+00:00 LOFI-BHS-1 sshd[2201721]: Invalid user es from 161.35.94.89 port 47806 2025-11-30T19:49:22.348220+00:00 LOFI-BHS-1 sshd[2201833]: Invalid user es from 161.35.94.89 port 38182 2025-11-30T19:49:22.348220+00:00 LOFI-BHS-1 sshd[2201833]: Invalid user es from 161.35.94.89 port 38182 2025-11-30T19:49:55.363541+00:00 LOFI-BHS-1 sshd[2202016]: Invalid user es from 161.35.94.89 port 42442 ... show less	Brute-Force SSH
Anonymous	2025-11-30 18:51:11 (7 months ago)	SSH Brute Force Attack	Brute-Force SSH
🇨🇦 Sayrix	2025-11-30 18:48:30 (7 months ago)	2025-11-30T18:44:46.210611+00:00 LOFI-BHS-1 sshd[2182799]: Invalid user admin from 161.35.94.89 port ... show more 2025-11-30T18:44:46.210611+00:00 LOFI-BHS-1 sshd[2182799]: Invalid user admin from 161.35.94.89 port 45302 2025-11-30T18:45:32.244309+00:00 LOFI-BHS-1 sshd[2182959]: Invalid user admin from 161.35.94.89 port 49788 2025-11-30T18:46:18.825246+00:00 LOFI-BHS-1 sshd[2183188]: Invalid user admin from 161.35.94.89 port 59410 2025-11-30T18:47:55.355621+00:00 LOFI-BHS-1 sshd[2183741]: Invalid user admin from 161.35.94.89 port 51814 2025-11-30T18:48:29.577208+00:00 LOFI-BHS-1 sshd[2183828]: Invalid user admin from 161.35.94.89 port 38392 ... show less	Brute-Force SSH
🇬🇧 WebServ	2025-11-30 18:47:32 (7 months ago)	Blocked by ufw after 3 attempts in last 300s.	Brute-Force SSH
🇳🇱 SysAdmin Dylan	2025-11-30 18:45:43 (7 months ago)	(sshd) Failed SSH login from 161.35.94.89 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 161.35.94.89 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Nov 30 19:44:50 sshd[1129170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.94.89 user=[USERNAME] show less	Brute-Force SSH
🇫🇷 gray Apple	2025-11-30 18:45:37 (7 months ago)	2025-11-30T19:44:52.104975+01:00 hammer sshd[3548514]: pam_unix(sshd:auth): authentication failure; ... show more 2025-11-30T19:44:52.104975+01:00 hammer sshd[3548514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.94.89 2025-11-30T19:44:54.722323+01:00 hammer sshd[3548514]: Failed password for invalid user admin from 161.35.94.89 port 39272 ssh2 2025-11-30T19:45:37.071068+01:00 hammer sshd[3548526]: Invalid user admin from 161.35.94.89 port 37388 ... show less	Brute-Force SSH
🇬🇧 Xiaohack	2025-11-30 18:45:11 (7 months ago)	Nov 30 19:44:27 xiaohack sshd[137178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Nov 30 19:44:27 xiaohack sshd[137178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.94.89 Nov 30 19:44:29 xiaohack sshd[137178]: Failed password for invalid user admin from 161.35.94.89 port 53624 ssh2 Nov 30 19:45:10 xiaohack sshd[137181]: Invalid user admin from 161.35.94.89 port 52520 ... show less	Brute-Force SSH
🇺🇸 oralunal	2025-11-30 18:45:01 (7 months ago)	IP banned by Fail2Ban in jail sshd auth.log mvfnds ...	SSH
Anonymous	2024-11-09 14:03:10 (1 year ago)		Web App Attack
🇩🇪 23.de	2022-11-28 04:14:00 (3 years ago)	Brute force Wordpress attack	Brute-Force Web App Attack
🇭🇺 DumaNet	2021-12-22 02:29:50 (4 years ago)	WordPress (CMS) attack attempts. Date: 2021 Dec 21. 13:58:45 Source IP: 161.35.94.89 Portion of ... show more WordPress (CMS) attack attempts. Date: 2021 Dec 21. 13:58:45 Source IP: 161.35.94.89 Portion of the log(s): 161.35.94.89 - [21/Dec/2021:13:58:37 +0100] "GET /wp-login.php HTTP/1.1" 200 2735 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 161.35.94.89 - [21/Dec/2021:13:58:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2939 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 161.35.94.89 - [21/Dec/2021:13:58:43 +0100] "POST /xmlrpc.php HTTP/1.1" 200 421 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
🇩🇪 ManagedStack	2021-12-21 10:20:12 (4 years ago)	Unauthorized path/IP Access (full log not revealed as it contains sensitive data)	Hacking Web App Attack
Anonymous	2021-12-21 08:31:36 (4 years ago)	supergamecollector.com 161.35.94.89 [21/Dec/2021:14:31:35 +0100] "POST /wp-login.php HTTP/1.1" 200 8 ... show more supergamecollector.com 161.35.94.89 [21/Dec/2021:14:31:35 +0100] "POST /wp-login.php HTTP/1.1" 200 8258 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" supergamecollector.com 161.35.94.89 [21/Dec/2021:14:31:36 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5595 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack

Showing 1 to 15 of 267 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.182.166.19

🇩🇪 172.104.241.92

🇱🇹 77.90.185.20

🇩🇪 69.5.169.39

🇺🇸 44.175.135.155

🇺🇸 205.210.31.49

🇧🇷 187.41.73.251

🇭🇰 165.154.245.138

🇻🇳 103.61.44.43

🇺🇦 94.244.23.159

🇸🇬 43.156.168.37

🇰🇷 222.239.251.12

🇰🇷 211.197.62.36

🇺🇸 205.210.31.89

🇺🇸 44.143.194.177

🇮🇳 202.162.231.21

🇺🇸 165.154.163.110

🇨🇳 111.18.52.174

🇵🇰 103.200.198.81

🇷🇴 92.118.39.49