159.89.181.216
Classification: Malicious
159.89.181.216 is a malicious IP address. Reported by 6 threat sources, last seen 2026-08-18. Network: AS14061 Digitalocean, LLC.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Open proxy — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-08-18 09:12:37 | 2026-08-18 09:12:37 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-08-18 09:12:36 | 2026-08-18 09:12:36 | malicious-activity | |
| Malicious Host | CIArmy | 2026-08-17 20:02:07 | 2026-08-17 20:02:07 | attacker malicious-activity | |
| Proxy | IPWhois.io | 2026-07-16 15:04:55 | 2026-07-16 15:04:55 | anonymization proxy | |
| Proxy | FireHOL | 2025-06-24 04:29:45 | 2025-10-06 16:15:23 | anonymization | |
| ET COMPROMISED Known Compromised or Hostile Host Traffic UDP | Emerging Threats | 2025-01-08 06:30:59 | 2025-02-03 08:07:56 | malicious-activity | |
| ET COMPROMISED Known Compromised or Hostile Host Traffic TCP | Emerging Threats | 2025-01-08 06:30:50 | 2025-02-03 08:07:45 | malicious-activity | |
| Malicious Host | AbuseIPDB | 2025-01-07 00:16:16 | 2025-01-19 15:30:10 | malicious-activity | |
| SSH Attacker | Blocklist.de | 2025-01-07 15:32:02 | 2025-01-09 06:53:59 | malicious-activity | |
| Bruteforce | AbuseIPDB | 2025-01-06 22:21:28 | 2025-01-07 00:19:52 | malicious-activity | |
| SSH Attacker | AbuseIPDB | 2025-01-06 22:20:56 | 2025-01-07 00:19:52 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2025-01-06 21:44:16 | 2025-01-07 00:10:18 | anomalous-activity | |
| Hacking | AbuseIPDB | 2025-01-06 22:23:42 | 2025-01-06 23:59:17 | malicious-activity |
Tags
ssh bruteforce bot anonymizationWhois information
- AS name
- AS14061 Digitalocean, LLC
- AS registry
- arin
- AS date
- 2017-07-07 00:00:00
- AS CIDR
- 159.89.176.0/20
- CIDR
- 159.89.0.0/16
- Registrant
- Digitalocean, LLC
- Address
- 101 Ave of the Americas FL2
- City
- Clifton
- State
- NJ
- Postal code
- 07013
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2025-01-07 00:21:52
- Last updated
- 2026-08-18 09:13:01
Malicious IPs in the same CIDR
159.89.179.241 159.89.190.133 159.89.183.66 159.89.190.100 159.89.191.12 159.89.176.50 159.89.181.216 159.89.177.154