159.89.113.91
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇨🇦 Canada
- City
- Toronto, Ontario
No reports in the last 60 days
159.89.113.91 has been reported 18 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
18 from
12 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 85)
Source port: 61004
TTL: 241
Packet length: 44
TOS: 0x08
This report (for 159.89.113.91) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 18789 with data transfer.
Data preview: GET / HTTP/1.1
Host: 167.253.66.144
Connection: keep-alive
sec-ch-ua: "Google Chrome";v="142", "N
|
Port Scan Hacking | |
| Anonymous |
[TCP/8882] Unsolicited connection attempt on a port with no legitimate public service.
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 6939.
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-04-19 07:22:54 UTC Unauthorized activity to TCP port 8089. Web App
|
Port Scan Web App Attack | |
| 🇹🇼 kk_it_man |
honey catch
|
Port Scan | |
| 🇩🇪 _ArminS_ |
WEB-Scan 61003:80 detected 2026.04.19 08:29:09
blocked until 2026.06.08 01:31:56
|
Port Scan | |
| 🇬🇧 djboddington |
This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf
|
SSH Brute-Force | |
| 🇺🇸 MPL |
tcp/4782
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 8088)
Source port: 61002
TTL: 241
Packet length: 44
TOS: 0x08
This report (for 159.89.113.91) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=61011 dstport=2000
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8089 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 8084)
Source port: 61001
TTL: 241
Packet length: 44
TOS: 0x08
This report (for 159.89.113.91) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.89.113.91 (CA/Canada/-): 2 in the last 3600 secs (0-196)
|
Hacking | |
| 🇺🇸 MPL |
tcp port scan (5 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown