159.89.111.43
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
No reports in the last 60 days
159.89.111.43 has been reported 45 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
45 from
36 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇹 Erpelstolz |
internal host: 159.89.111.43 - - [23/Nov/2025:10:42:48 +0100] "GET /upl.php HTTP/1.1" 403 962 "-" "Mozilla/5.0"
|
Hacking Web App Attack | |
| 🇧🇷 SOC-BR |
Attack detected by Fortinet - backdoor: SystemBC.Botnet - 2025-11-24 01:54:49 - Source Port 51438
|
Port Scan Hacking | |
| 🇰🇪 Oste |
Unauthorized activity detected from reported IP, including scanning and intrusion attempts.
|
Hacking SQL Injection Bad Web Bot Web App Attack | |
| 🇩🇪 hbrks |
|
Web Spam Hacking Bad Web Bot | |
| 🇦🇹 Erpelstolz |
VM 131: 159.89.111.43 - - [24/Nov/2025:02:56:47 +0100] "GET /upl.php HTTP/1.1" 404 590
|
Web App Attack | |
| 🇩🇪 Trashware |
Nosy troll bot
|
Hacking Bad Web Bot Web App Attack | |
| 🇬🇧 [email protected] |
...
|
Brute-Force SSH | |
| 🇩🇪 fleckenbase |
apache-noscript
...
|
Brute-Force Web App Attack | |
| 🇩🇪 Roper123 |
Web exploits
|
Web App Attack | |
| Anonymous |
|
Brute-Force Web App Attack | |
| 🇩🇰 Leif Neland |
Detected by CrowdSec on slim
|
Brute-Force | |
| 🇺🇸 masterguru |
Host header is a numeric IP address. Pattern match "^ (920350-163)
|
Hacking Bad Web Bot | |
| 🇺🇸 LotPhantom |
159.89.111.43 - - [23/Nov/2025:14:40:51 +0000] "GET /upl.php HTTP/1.1" 404 146 "-" "Mozilla/5.0" "0"
...
|
Web App Attack | |
| 🇺🇸 RogueAutomata |
Detected malicious request: GET /
Detections triggered: Access via IP addr (v4)
|
Web App Attack | |
| 🇫🇷 Pölkky |
Probe
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown