JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.89.121.45

Neutral Activity

Abuse Confidence Score

0% Low Risk

37 reports

25 reporters · latest 2 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇨🇦 Canada
City: Toronto, Ontario

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.89.121.45 has been reported 37 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

37 from 25 distinct reporters

First reported

January 6th 2024

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-08-25 18:46:37 UTC · (2 months ago)	tcp/6688	Port Scan
🇩🇪 dispaisyenterprises	2026-08-25 18:33:36 UTC · (2 months ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 5173 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Acc ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 5173 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 5173 [2] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇦🇺 dyln	2026-08-25 18:30:41 UTC · (2 months ago)	Dyls honeypot brute-force: proto8 (1 total hits)	Brute-Force
Anonymous	2026-08-25 18:29:42 UTC · (2 months ago)	denied traffic to a non-approved destination port. destination port 5003.	Port Scan
🇺🇸 sumnone	2026-08-25 18:23:14 UTC · (2 months ago)	Port probing on unauthorized port 1177	Port Scan Hacking Exploited Host
🇫🇮 6kilowatti	2026-08-25 17:48:12 UTC · (2 months ago)	2026-08-25T20:48:11.798020+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=159.89.121.45 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=31564 PROTO=TCP SPT=61007 DPT=55555 WINDOW=1025 RES=0x00 ... show more 2026-08-25T20:48:11.798020+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=159.89.121.45 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=31564 PROTO=TCP SPT=61007 DPT=55555 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-08-25 17:37:42 UTC · (2 months ago)	denied traffic to a non-approved destination port. destination port 6000.	Port Scan
🇺🇸 Cyber Crusader	2026-08-25 11:39:24 UTC · (2 months ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇩🇪 EGP Abuse Dept	2026-02-22 12:32:21 UTC · (8 months ago)	Scanning for port/service exploits on tpc-031.mach3builders.nl	Port Scan Hacking
🇺🇸 MPL	2026-02-22 12:29:45 UTC · (8 months ago)	tcp/8082 (3 or more attempts)	Port Scan
🇫🇷 masterguru	2026-01-28 17:16:27 UTC · (9 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.89.121.45 (CA/Canada/-): 1 in the last 3600 secs (0-196)	Hacking
🇨🇿 lp	2026-01-25 16:19:58 UTC · (9 months ago)	SSH Brute force: 1 attempts were recorded from 159.89.121.45 2026-01-25T15:58:26+01:00 Connection closed by authenticating user root 159.89.121.45 port 34400 [preauth]	Brute-Force SSH
🇨🇦 KatSystems	2026-01-25 15:20:43 UTC · (9 months ago)	2026-01-25T15:20:37.313905+00:00 vps-b43e0d3e sshd-session[3246569]: Invalid user aos2006 from 159.89.121.45 port 54764 2026-01-25T15:20:37.326649+00:00 vps-b43e0d3e sshd-session[3246569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more 2026-01-25T15:20:37.313905+00:00 vps-b43e0d3e sshd-session[3246569]: Invalid user aos2006 from 159.89.121.45 port 54764 2026-01-25T15:20:37.326649+00:00 vps-b43e0d3e sshd-session[3246569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.121.45 2026-01-25T15:20:39.613882+00:00 vps-b43e0d3e sshd-session[3246569]: Failed password for invalid user aos2006 from 159.89.121.45 port 54764 ssh2 2026-01-25T15:20:40.259254+00:00 vps-b43e0d3e sshd-session[3246575]: Invalid user ap-hadoop from 159.89.121.45 port 54766 2026-01-25T15:20:42.619284+00:00 vps-b43e0d3e sshd-session[3246577]: Invalid user ap-hadoop from 159.89.121.45 port 54768 ... show less	Brute-Force SSH
🇳🇱 trivox.sh	2026-01-25 15:00:34 UTC · (9 months ago)	Jan 25 15:00:28 TV-DB1-R630-13 sshd[802154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.121.45 Jan 25 15:00:30 TV-DB1-R630-13 sshd[802154]: Failed password for invalid user .msd from 159.89.121.45 ... show more Jan 25 15:00:28 TV-DB1-R630-13 sshd[802154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.121.45 Jan 25 15:00:30 TV-DB1-R630-13 sshd[802154]: Failed password for invalid user .msd from 159.89.121.45 port 37442 ssh2 Jan 25 15:00:30 TV-DB1-R630-13 sshd[802156]: Invalid user 1 from 159.89.121.45 port 37456 Jan 25 15:00:30 TV-DB1-R630-13 sshd[802156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.121.45 Jan 25 15:00:33 TV-DB1-R630-13 sshd[802156]: Failed password for invalid user 1 from 159.89.121.45 port 37456 ssh2 ... show less	Brute-Force SSH
🇨🇦 KatSystems	2026-01-25 15:00:33 UTC · (9 months ago)	2026-01-25T15:00:30.024664+00:00 vps-b43e0d3e sshd-session[3246084]: Invalid user 1 from 159.89.121.45 port 44782 2026-01-25T15:00:28.998118+00:00 vps-b43e0d3e sshd-session[3246082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more 2026-01-25T15:00:30.024664+00:00 vps-b43e0d3e sshd-session[3246084]: Invalid user 1 from 159.89.121.45 port 44782 2026-01-25T15:00:28.998118+00:00 vps-b43e0d3e sshd-session[3246082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.121.45 2026-01-25T15:00:31.181479+00:00 vps-b43e0d3e sshd-session[3246082]: Failed password for invalid user .msd from 159.89.121.45 port 44776 ssh2 2026-01-25T15:00:30.038966+00:00 vps-b43e0d3e sshd-session[3246084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.121.45 2026-01-25T15:00:32.005514+00:00 vps-b43e0d3e sshd-session[3246084]: Failed password for invalid user 1 from 159.89.121.45 port 44782 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 34.78.49.147

🇧🇷 191.7.159.201

🇧🇷 143.137.38.104

🇻🇳 113.161.149.20

🇩🇪 92.218.123.69

🇰🇷 61.76.112.4

🇰🇪 196.200.17.186

🇷🇸 178.223.150.43

🇨🇦 142.184.207.245

🇧🇩 103.153.130.235

🇺🇸 70.183.226.58

🇸🇬 47.79.206.7

🇺🇸 45.74.252.236

🇧🇪 34.38.141.52

🇺🇸 2604:a880:400:d1:0:5:5f95:5001

🇵🇱 176.53.159.197

🇺🇸 162.216.149.61

🇸🇬 103.250.10.42

🇪🇸 89.128.213.72

🇨🇭 84.75.255.9