164.90.161.189

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
85% Critical
19 reports
18 reporters ยท latest 28 minutes ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
๐Ÿ‡ฉ๐Ÿ‡ช Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
19 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 4 ๐Ÿ‡ซ๐Ÿ‡ท France 4 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 2
Most common categories Port Scan 6 Brute-Force 6 Hacking 4 Web App Attack 4 Email Spam 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ chronos
DDoS Attack Phishing Web Spam Blog Spam Web App Attack
๐Ÿ‡ฎ๐Ÿ‡น CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,ndpi_unsafe_protocol,tcp_no_data_exchanged,connection_failed
Hacking
๐Ÿ‡ฆ๐Ÿ‡บ LiftUp Hosting
Honeypot hit: Unauthorized traffic (4 bytes of payload); 9042 [30] TCP
Port Scan
๐Ÿ‡ญ๐Ÿ‡บ kisbala
Email Spam Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช EnthecSolutions
Detected by Enthec Solutions. | Attempts: 32 in 24h | Target port: 9092
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท agroman93
T-Pot honeypot: 86 hits on ports [465] (automated)
Email Spam Port Scan
Anonymous
164.90.161.189 detected on srv01
Brute-Force
Anonymous
SSH BruteForce attack
SSH
๐Ÿ‡ฉ๐Ÿ‡ช lister171254
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ FoxSec
Honeypot: Port scanning across honeypot services, 5 attempts
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ฐ SaltySoftworks
2026-10-28T08:18:25.118425+00:00 postfix/smtps/smtpd: lost connection after CONNECT from unknown[164.90.161.189] 2026-10-28T08:18:25.348049+00:00 postfix/smtps/smtpd: lost connection after CONNECT from unknown[164.90.161.189]
Email Spam Hacking Brute-Force Bad Web Bot Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 14 payload-bearing connection/event(s), 918 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 1911.
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 27 application-level events across 2 target ports and 27 source port(s). Ports: 1911/service, 4891/service. Sensors: Honeytrap.
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช sojan
Web App Attack
๐Ÿ‡ฆ๐Ÿ‡ช abusiveIntelligence
RDP connect attempt: Nmap Scanner
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฎ๐Ÿ‡ณ 223.181.119.111
๐Ÿ‡น๐Ÿ‡ท 222.167.236.20
๐Ÿ‡บ๐Ÿ‡ธ 216.180.246.211
๐Ÿ‡บ๐Ÿ‡ธ 209.87.169.144
๐Ÿ‡ณ๐Ÿ‡ฑ 195.178.110.228
๐Ÿ‡ฌ๐Ÿ‡ง 185.247.137.120
๐Ÿ‡บ๐Ÿ‡ธ 185.81.144.41
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.198
๐Ÿ‡ฎ๐Ÿ‡ณ 103.91.246.101
๐Ÿ‡ญ๐Ÿ‡ฐ 94.190.229.193
๐Ÿ‡บ๐Ÿ‡ธ 87.56.23.16
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.32
๐Ÿ‡ซ๐Ÿ‡ท 80.9.200.88
๐Ÿ‡ฆ๐Ÿ‡บ 65.254.93.170
๐Ÿ‡ฎ๐Ÿ‡ท 62.60.134.134
๐Ÿ‡จ๐Ÿ‡ณ 60.217.65.254
๐Ÿ‡บ๐Ÿ‡ธ 54.147.207.61
๐Ÿ‡บ๐Ÿ‡ธ 20.51.250.231
๐Ÿ‡บ๐Ÿ‡ธ 20.42.110.218
๐Ÿ‡ญ๐Ÿ‡ฐ 223.197.146.159