JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.189.109.52

206.189.109.52 was found in our database!

This IP was reported 266 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.189.109.52

Whois 206.189.109.52

IP Abuse Reports for 206.189.109.52:

This IP address has been reported a total of 266 times from 149 distinct sources. 206.189.109.52 was first reported on June 21st 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ValtonTahiri	2026-03-24 00:33:16 (2 months ago)	Honeypot hit: HTTP/1.1 request on 5552 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) ... show more Honeypot hit: HTTP/1.1 request on 5552 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Full payload: GET / HTTP/1.1 Host: [SOME-IP] User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, defl... on 5552/TCP (2 attempts) show less	Hacking Bad Web Bot
🇬🇧 andypiper	2026-03-23 02:00:45 (3 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 MPL	2026-03-23 01:55:13 (3 months ago)	tcp/8888	Port Scan
🇺🇸 MPL	2026-03-23 01:38:53 (3 months ago)	tcp ports: 8001,8888 (3 or more attempts)	Port Scan
🇺🇸 RAP	2026-03-23 01:18:44 (3 months ago)	2026-03-23 01:18:44 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇷🇸 Scan	2026-03-23 01:16:26 (3 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 MPL	2026-03-18 06:12:18 (3 months ago)	tcp ports: 8089,8808 (4 or more attempts)	Port Scan
🇹🇷 rtbh.com.tr	2026-03-14 20:12:03 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2026-03-14 00:34:08 (3 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/206.189.109.52	SSH
🇦🇹 urnilxfgbez	2026-03-13 23:45:00 (3 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇹🇷 rtbh.com.tr	2026-03-13 20:12:02 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 syndications4radio.de	2026-03-13 08:51:07 (3 months ago)	2026-03-13T09:50:21.534116+01:00 v2202403218999259734 sshd[709644]: pam_unix(sshd:auth): authenticat ... show more 2026-03-13T09:50:21.534116+01:00 v2202403218999259734 sshd[709644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.109.52 2026-03-13T09:50:23.305728+01:00 v2202403218999259734 sshd[709644]: Failed password for invalid user postgres from 206.189.109.52 port 47508 ssh2 2026-03-13T09:51:05.301356+01:00 v2202403218999259734 sshd[709784]: Invalid user postgres from 206.189.109.52 port 57592 2026-03-13T09:51:05.339005+01:00 v2202403218999259734 sshd[709784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.109.52 2026-03-13T09:51:07.151495+01:00 v2202403218999259734 sshd[709784]: Failed password for invalid user postgres from 206.189.109.52 port 57592 ssh2 ... show less	Brute-Force SSH
🇫🇷 krapon	2026-03-13 08:49:04 (3 months ago)	Mar 13 09:48:27 service sshd[683529]: Invalid user postgres from 206.189.109.52 port 46574 Mar 13 09 ... show more Mar 13 09:48:27 service sshd[683529]: Invalid user postgres from 206.189.109.52 port 46574 Mar 13 09:49:04 service sshd[683573]: Invalid user postgres from 206.189.109.52 port 37550 ... show less	Brute-Force SSH
🇰🇷 MU-star.net	2026-03-13 08:47:41 (3 months ago)	Invalid user admin from 206.189.109.52 port 50348	Port Scan Brute-Force SSH
🇳🇱 mrtalon.eu	2026-03-13 08:46:31 (3 months ago)	2026-03-13T09:43:30.941467+01:00 uptime.mrtalon.eu sshd[1031528]: Invalid user test from 206.189.109 ... show more 2026-03-13T09:43:30.941467+01:00 uptime.mrtalon.eu sshd[1031528]: Invalid user test from 206.189.109.52 port 39640 2026-03-13T09:44:15.677484+01:00 uptime.mrtalon.eu sshd[1039939]: Invalid user test from 206.189.109.52 port 49064 2026-03-13T09:44:56.916526+01:00 uptime.mrtalon.eu sshd[1046994]: Invalid user test from 206.189.109.52 port 34662 2026-03-13T09:45:44.212351+01:00 uptime.mrtalon.eu sshd[1056029]: Invalid user test from 206.189.109.52 port 58780 2026-03-13T09:46:31.306997+01:00 uptime.mrtalon.eu sshd[1064585]: Invalid user postgres from 206.189.109.52 port 34268 ... show less	Brute-Force SSH

Showing 1 to 15 of 266 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.109.191.140

🇧🇷 172.237.54.196

🇺🇸 35.169.77.139

🇺🇸 34.169.80.22

🇨🇳 120.48.122.158

🇺🇸 35.203.166.180

🇳🇱 34.178.21.247

🇺🇸 24.30.46.249

🇨🇳 1.83.125.12

🇳🇱 195.178.110.30

🇪🇸 141.109.168.107

🇰🇷 101.36.114.209

🇳🇱 45.148.10.239

🇸🇬 43.128.108.15

🇳🇱 185.136.15.10

🇲🇾 183.171.41.105

🇳🇱 176.65.139.249

🇦🇹 152.53.0.56

🇫🇷 85.217.140.53

🇷🇺 80.253.31.232