JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.89.157.200

185.89.157.200

Recent Activity

38 reports found in our database

80% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Albanian Telecommunications Union SH. P.K.

Usage Type

Fixed Line ISP

ASN

AS198279

Domain Name

atu.al

Country

🇦🇱 Albania

City

Tirana, Tirana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 185.89.157.200:

This IP address has been reported a total of 38 times from 24 distinct sources. 185.89.157.200 was first reported on August 5th 2025, and the most recent report was 2 hours ago. In the last 60 days, the top reporter locations were: United States of America with 11 reports; Netherlands with 7 reports; Germany with 4 reports. The most common categories in these recent reports were: Port Scan 17 times; Brute-Force 11 times; SSH 10 times; Hacking 5 times; Bad Web Bot 4 times; Other 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-09-07 23:01:33 (2 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 73>=65, Abuse 76, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇳🇱 Ilop	2026-08-31 04:37:54 (1 week ago)	[v6-22] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 22 from 185.89.157.200 — WAN s ... show more [v6-22] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 22 from 185.89.157.200 — WAN scan (automated sensor) show less	Port Scan
🇺🇸 xmission.com	2026-08-30 09:25:54 (1 week ago)	Blocked by UFW (TCP on 22) Source port: 33208 TTL: 40 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 33208 TTL: 40 Packet length: 60 TOS: 0x08 This report (for 185.89.157.200) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇳🇱 Ilop	2026-08-30 03:07:23 (1 week ago)	[v6-22] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 22 from 185.89.157.200 — WAN s ... show more [v6-22] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 22 from 185.89.157.200 — WAN scan (automated sensor) show less	Port Scan
🇺🇸 xmission.com	2026-08-29 09:03:09 (1 week ago)	Blocked by UFW (TCP on 23) Source port: 48936 TTL: 43 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 48936 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 185.89.157.200) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-08-29 02:01:10 (1 week ago)	[Firewall] SSH Brute-Force \| Proto: TCP (NEW) \| Src port: 52886 \| Dst port: 22 (SSH) \| Pkt len: 60 \| ... show more [Firewall] SSH Brute-Force \| Proto: TCP (NEW) \| Src port: 52886 \| Dst port: 22 (SSH) \| Pkt len: 60 \| Attempts logged: 2 \| ISP: Albanian Telecommunications Union SH. P.K. \| Origin: Tirana, Albania \| Prior AbuseIPDB score: 96% (22 reports) \| Detected: 2026-08-28 20:40 CST \| Promoted to blacklist after repeated attempts \| Banned: 6d23h40m10s show less	Brute-Force
🇩🇪 ghostwarriors	2026-08-29 01:53:08 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇳🇱 Ilop	2026-08-29 01:37:26 (1 week ago)	[v6-22] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 22 from 185.89.157.200 — WAN s ... show more [v6-22] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 22 from 185.89.157.200 — WAN scan (automated sensor) show less	Port Scan
🇵🇱 MatStef132	2026-08-28 19:45:06 (1 week ago)	MatShield L7: blocked on test-clean.mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 xmission.com	2026-08-28 01:22:28 (1 week ago)	Blocked by UFW (TCP on 22) Source port: 45942 TTL: 41 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 45942 TTL: 41 Packet length: 60 TOS: 0x08 This report (for 185.89.157.200) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇳🇱 Ilop	2026-08-28 00:05:49 (1 week ago)	[v6-22] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 22 from 185.89.157.200 — WAN s ... show more [v6-22] Firewall dropped 4 unsolicited packet(s) proto=tcp to port(s) 22 from 185.89.157.200 — WAN scan (automated sensor) show less	Port Scan
🇺🇸 HamSammich	2026-08-27 16:58:48 (1 week ago)	Automated sensor: 2 SSH connection/probe attempts over the last 24h (latest 2026-08-27T16:58Z).	Brute-Force SSH
🇩🇪 ghostwarriors	2026-08-27 07:50:35 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇷🇸 Scan	2026-08-27 00:51:32 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 gui-ying233	2026-08-26 15:05:58 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.38

🇧🇷 200.175.61.207

🇦🇷 200.59.88.86

🇧🇪 198.235.24.185

🇳🇱 195.178.110.217

🇲🇽 189.173.57.60

🇺🇸 162.216.149.5

🇩🇪 135.125.235.107

🇻🇳 115.76.185.222

🇺🇸 104.248.210.24

🇸🇬 101.47.158.56

🇺🇸 91.230.168.13

🇺🇸 85.239.151.10

🇫🇷 78.192.21.78

🇺🇸 52.161.83.193

🇬🇧 31.14.254.23

🇩🇪 194.88.98.125

🇧🇩 117.103.80.168

🇳🇱 94.154.43.43

🇺🇸 70.120.203.193