JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.189.63.1

206.189.63.1 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.189.63.1

Whois 206.189.63.1

IP Abuse Reports for 206.189.63.1:

This IP address has been reported a total of 87 times from 72 distinct sources. 206.189.63.1 was first reported on August 1st 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 tjs	2026-06-07 21:55:00 (1 week ago)	web attack	Hacking Web App Attack
🇳🇱 Selckie	2026-06-05 17:06:10 (1 week ago)	fail2ban: NGINX unusual impact	Web App Attack
🇨🇭 GAS	2026-06-05 10:19:19 (1 week ago)	SSH Honeypot attack. {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"20 ... show more SSH Honeypot attack. {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"206.189.63.1","time":"2026-06-05T10:18:26.415464678Z"} {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"206.189.63.1","time":"2026-06-05T10:18:32.695788705Z"} {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"206.189.63.1","time":"2026-06-05T10:18:39.749746949Z"} {"duser":"GET / HTTP/1.0","level":"info","msg":"Telnet login attempt","password":"","src":"206.189.63.1","time":"2026-06-05T10:18:39.956070812Z"} {"duser":"OPTIONS / HTTP/1.0","level":"info","msg":"Telnet login attempt","password":"","src":"206.189.63.1","time":"2026-06-05T10:18:42.228015158Z"} {"duser":"OPTIONS / RTSP/1.0","level":"info","msg":"Telnet login attempt","password":"","src":"206.189.63.1","time":"2026-06-05T10:18:44.500847846Z"} {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"206.189.63.1","time":"2026-06-05T10:18:51.549900714Z"} {"duser":"","level":"info ... show less	Brute-Force SSH
🇨🇦 alexbfr	2026-06-05 04:18:41 (1 week ago)	Fail2Ban Report, postfix jail: Automated honeypot detection.	Port Scan
🇮🇩 Konaa	2026-06-04 17:03:12 (1 week ago)	Jun 04 23:14:51 rapi wings[1730548]: 2026/06/04 23:14:51 http: TLS handshake error from 206.189.63.1 ... show more Jun 04 23:14:51 rapi wings[1730548]: 2026/06/04 23:14:51 http: TLS handshake error from 206.189.63.1:18497: tls: first record does not look like a TLS handshake Jun 04 23:14:51 rapi wings[1730548]: 2026/06/04 23:14:51 http: TLS handshake error from 206.189.63.1:11479: tls: first record does not look like a TLS handshake Jun 04 23:14:56 rapi wings[1730548]: 2026/06/04 23:14:56 http: TLS handshake error from 206.189.63.1:5241: unexpected EOF Jun 04 23:14:57 rapi wings[1730548]: 2026/06/04 23:14:57 http: TLS handshake error from 206.189.63.1:32113: tls: unsupported SSLv2 handshake received Jun 04 23:32:04 rapi wings[1730548]: 2026/06/04 23:32:04 http: TLS handshake error from 206.189.63.1:13211: read tcp 31.56.192.17:8080->206.189.63.1:13211: read: connection timed out show less	Brute-Force Port Scan
🇮🇩 Konaa	2026-06-04 16:15:11 (1 week ago)	Jun 04 23:14:51 rapi wings[1730548]: 2026/06/04 23:14:51 http: TLS handshake error from 206.189.63.1 ... show more Jun 04 23:14:51 rapi wings[1730548]: 2026/06/04 23:14:51 http: TLS handshake error from 206.189.63.1:18497: tls: first record does not look like a TLS handshake Jun 04 23:14:51 rapi wings[1730548]: 2026/06/04 23:14:51 http: TLS handshake error from 206.189.63.1:11479: tls: first record does not look like a TLS handshake Jun 04 23:14:56 rapi wings[1730548]: 2026/06/04 23:14:56 http: TLS handshake error from 206.189.63.1:5241: unexpected EOF Jun 04 23:14:57 rapi wings[1730548]: 2026/06/04 23:14:57 http: TLS handshake error from 206.189.63.1:32113: tls: unsupported SSLv2 handshake received show less	Brute-Force Port Scan
🇸🇬 drewf.ink	2026-06-04 15:40:23 (1 week ago)	[15:40] Port scanning. Port(s) scanned: TCP/5000	Port Scan
🇺🇸 donarev419	2026-06-04 07:39:57 (1 week ago)	Port scan detected on port 1911 (connection without data transfer)	Port Scan
🇺🇸 gu-alvareza	2026-06-04 07:05:17 (1 week ago)	Nmap.Script.Scanner	Port Scan
🇦🇪 abusiveIntelligence	2026-06-04 04:30:00 (1 week ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇦🇺 Terrier	2026-06-03 23:00:01 (1 week ago)	Blocked for HTTP vulnerability scanning (excessive 40x)	Web App Attack
🇺🇸 kuj	2026-06-03 22:42:12 (1 week ago)	2026-06-03T16:42:12.183680-06:00 derpamp-oci derper[287106]: 2026/06/03 16:42:12 http: TLS handshake ... show more 2026-06-03T16:42:12.183680-06:00 derpamp-oci derper[287106]: 2026/06/03 16:42:12 http: TLS handshake error from 206.189.63.1:4833: tls: client offered only unsupported versions: [] 2026-06-03T16:42:12.478511-06:00 derpamp-oci derper[287106]: 2026/06/03 16:42:12 http: TLS handshake error from 206.189.63.1:32515: acme/autocert: missing server name 2026-06-03T16:42:12.772361-06:00 derpamp-oci derper[287106]: 2026/06/03 16:42:12 http: TLS handshake error from 206.189.63.1:4177: acme/autocert: missing server name ... show less	Port Scan Brute-Force
Anonymous	2026-06-03 15:56:08 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 1234 [15] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 1234 [15] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇸🇬 WMK965	2026-06-03 15:49:04 (1 week ago)	206.189.63.1 - - [03/Jun/2026:23:49:02 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 206.189.63.1 - ... show more 206.189.63.1 - - [03/Jun/2026:23:49:02 +0800] "OPTIONS / HTTP/1.0" 444 0 "-" "-" "-" 206.189.63.1 - - [03/Jun/2026:23:49:02 +0800] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 444 0 "-" "-" "-" 206.189.63.1 - - [03/Jun/2026:23:49:03 +0800] "\x00\x00\x07\x00\x08\x00\x03\x00\x04\x00\x05\x00\x06" 400 154 "-" "-" "-" show less	Port Scan Web App Attack
🇩🇪 Justin F. \| AS204464	2026-06-03 14:46:47 (1 week ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 11434 [14] TCP Reported by: Just ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 11434 [14] TCP Reported by: Justin F. show less	Port Scan

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 196.92.7.249

🇮🇩 157.20.252.49

🇮🇶 65.20.143.45

🇪🇸 64.137.96.81

🇳🇱 45.148.10.152

🇮🇳 34.131.2.222

🇻🇪 200.84.114.111

🇦🇷 186.122.90.4

🇵🇰 139.135.40.12

🇭🇰 103.210.21.178

🇷🇺 90.189.127.39

🇱🇹 81.30.98.225

🇺🇸 66.132.172.235

🇺🇸 66.132.172.198

🇺🇸 204.141.232.113

🇦🇿 185.91.211.187

🇧🇩 103.183.62.0

🇷🇺 95.108.213.138

🇵🇹 84.247.60.121

🇺🇸 73.168.53.36