JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.189.11.5

206.189.11.5 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 35%: ?

35%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	1567721.cloudwaysapps.com
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.189.11.5

Whois 206.189.11.5

IP Abuse Reports for 206.189.11.5:

This IP address has been reported a total of 31 times from 21 distinct sources. 206.189.11.5 was first reported on December 12th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-06-13 19:30:15 (1 week ago)	7 incidents: malicious activity. Ports: 123/UDP(13). First: 2026-05-22 17:30, Last: 2026-06-13 15:30 ... show more 7 incidents: malicious activity. Ports: 123/UDP(13). First: 2026-05-22 17:30, Last: 2026-06-13 15:30 UTC. Triggers: ufw-repeater. show less	Port Scan
🇧🇾 StatsMe	2026-05-16 21:05:41 (1 month ago)	2026-05-16T00:01:19.998500+0300 ET DELETED Possible NTP DDoS Inbound Frequent Un-Authed MON_LIST Req ... show more 2026-05-16T00:01:19.998500+0300 ET DELETED Possible NTP DDoS Inbound Frequent Un-Authed MON_LIST Requests IMPL 0x03 show less	DDoS Attack
🇧🇾 StatsMe	2026-05-15 22:42:43 (1 month ago)	2026-05-15T23:33:57.831297+0300 ET DELETED Possible NTP DDoS Inbound Frequent Un-Authed MON_LIST Req ... show more 2026-05-15T23:33:57.831297+0300 ET DELETED Possible NTP DDoS Inbound Frequent Un-Authed MON_LIST Requests IMPL 0x03 show less	DDoS Attack
🇮🇪 RoboSOC	2026-05-15 22:27:09 (1 month ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 1567721.cloudwaysapps.com.	Port Scan
🇩🇪 cheatmaster.store	2026-05-15 21:26:49 (1 month ago)	Automatic firewall detection. Attacker IP: 206.189.11.5 Country: NL City: Amsterdam ORG: AS14061 Di ... show more Automatic firewall detection. Attacker IP: 206.189.11.5 Country: NL City: Amsterdam ORG: AS14061 DigitalOcean, LLC UFW LOGS: May 15 21:25:20 srv-23213 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=4a:63:06:71:79:3f:20:ed:47:e9:a1:42:08:00 SRC=206.189.11.5 DST=SERVER_IP_HIDDEN LEN=36 TOS=0x08 PREC=0x40 TTL=18 ID=18545 DF PROTO=UDP SPT=49407 DPT=123 LEN=16 May 15 21:25:21 srv-23213 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=4a:63:06:71:79:3f:20:ed:47:e9:a1:42:08:00 SRC=206.189.11.5 DST=SERVER_IP_HIDDEN LEN=36 TOS=0x08 PREC=0x40 TTL=240 ID=38175 DF PROTO=UDP SPT=17721 DPT=123 LEN=16 Server IP hidden for privacy. Detected repeated unauthorized connection attempts and firewall blocks. show less	Port Scan Hacking Brute-Force SSH
🇺🇸 micropedro	2026-05-15 21:23:00 (1 month ago)	15 incidents: port scanning. Ports: 123/UDP(13). First: 2026-05-15 16:33, Last: 2026-05-15 17:23 UTC ... show more 15 incidents: port scanning. Ports: 123/UDP(13). First: 2026-05-15 16:33, Last: 2026-05-15 17:23 UTC. Triggers: port-trap,non-public-port,ufw-repeater,recidive,firewall-udp. show less	Port Scan Brute-Force
🇭🇺 aasd6574	2026-05-15 21:00:00 (1 month ago)	a input: in:pppoe-out1 out:(unknown 0), connection-state:new proto TCP (SYN), 185.242.3.226:23367->x ... show more a input: in:pppoe-out1 out:(unknown 0), connection-state:new proto TCP (SYN), 185.242.3.226:23367->x.x.x.x:53, len 52 show less	Port Scan Hacking
🇩🇪 ValtonTahiri	2026-05-15 20:44:55 (1 month ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=206.189.11.5; proto=UDP; source_port=56725; target_port=123 show less	Port Scan
🇩🇪 EinfxchFinn	2026-05-15 20:40:24 (1 month ago)	Unauthorized connection attempt to port 123 from 206.189.11.5	Port Scan
Anonymous	2026-05-15 20:37:42 (1 month ago)	May 15 16:37:41 localhost kernel: [107222813.155365] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more May 15 16:37:41 localhost kernel: [107222813.155365] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=206.189.11.5 DST=[mungedIP2] LEN=36 TOS=0x00 PREC=0x40 TTL=17 ID=5681 DF PROTO=UDP SPT=25751 DPT=123 LEN=16 May 15 16:37:41 localhost kernel: [107222813.155380] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=206.189.11.5 DST=[mungedIP2] LEN=36 TOS=0x00 PREC=0x40 TTL=17 ID=5681 DF PROTO=UDP SPT=25751 DPT=123 LEN=16 May 15 16:37:41 localhost kernel: [107222813.243726] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=206.189.11.5 DST=[mungedIP2] LEN=36 TOS=0x00 PREC=0x40 TTL=239 ID=52401 DF PROTO=UDP SPT=49619 DPT=123 LEN=16 May 15 16:37:41 localhost kernel: [107222813.243733] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=206.189.11.5 DST=[mungedIP2] LEN=36 TOS=0x00 PREC=0x40 TTL=239 ID=52401 DF PROTO=UDP SPT=49619 DPT=123 LEN=16 show less	Port Scan
🇩🇪 Tamsweb	2026-05-15 20:35:02 (1 month ago)	Unauthorized connection attempt or scan from 206.189.11.5 on port 60875 ...	Port Scan
Anonymous	2026-05-15 20:32:52 (1 month ago)	Tried our host z.	Port Scan Hacking Exploited Host
Anonymous	2026-05-15 20:31:14 (1 month ago)	Hit honeypot r.	Port Scan Hacking Exploited Host
🇩🇪 iNetWorker	2026-05-15 20:28:43 (1 month ago)	trying to access non-authorized port	Port Scan
🇺🇸 MPL	2025-10-21 05:41:39 (8 months ago)	tcp ports: 4782,1177 (3 or more attempts)	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.204.70.106

🇵🇱 81.18.221.21

🇱🇹 45.227.254.170

🇺🇸 45.130.83.186

🇺🇸 35.245.111.185

🇺🇸 2602:fa59:10:e7f::1

🇯🇵 194.5.48.109

🇮🇳 182.95.182.138

🇵🇱 91.237.73.163

🇸🇬 85.203.21.52

🇳🇱 185.246.155.234

🇮🇳 136.232.11.10

🇿🇦 102.129.59.74

🇳🇴 93.89.113.60

🇺🇸 86.48.22.202

🇷🇺 81.23.182.16

🇫🇷 213.136.89.137

🇳🇱 206.189.5.249

🇺🇸 191.96.165.181

🇨🇴 161.18.234.168