JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.128.172

159.89.128.172 was found in our database!

This IP was reported 241 times. Confidence of Abuse is 29%: ?

29%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.128.172

Whois 159.89.128.172

IP Abuse Reports for 159.89.128.172:

This IP address has been reported a total of 241 times from 94 distinct sources. 159.89.128.172 was first reported on January 13th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇩 bakunin1848	2026-05-10 07:02:08 (1 month ago)	Firewall IPS Detection on 10-05-2026 at 09:02:08	Port Scan Exploited Host
🇨🇳 pengpeng	2026-05-09 05:08:34 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 17352 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 17352 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-05-08 00:33:36 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 16013 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 16013 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇸 Scan	2026-05-07 00:56:28 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇬🇧 gbzret4d	2026-04-27 12:22:36 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 11335 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 11335 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 11335 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 2MP	2026-04-26 00:01:40 (1 month ago)	Honeypot [gcp-tpot]: HTTP/1.1 request on 5010 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64 ... show more Honeypot [gcp-tpot]: HTTP/1.1 request on 5010 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 5010 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 2MP	2026-04-25 16:07:37 (1 month ago)	Honeypot [gcp-tpot]: HTTP/1.1 request on 4883 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64 ... show more Honeypot [gcp-tpot]: HTTP/1.1 request on 4883 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 4883 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-04-25 10:10:35 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 10561 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 10561 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 10561 [1] TCP show less	Hacking Bad Web Bot
🇫🇮 nNordic	2026-04-25 08:43:50 (1 month ago)	Connection attempt blocked by IDS/IPS from 159.89.128.172/32	Hacking
🇺🇸 MPL	2026-04-25 07:37:12 (1 month ago)	tcp/1883 (2 or more attempts)	Port Scan
🇹🇼 taiwanfrp.me	2026-04-24 04:01:01 (1 month ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, target=proxy:kiwicanary.MinecraftJavagredvfdvdfdfcvcv\|port:- show less	Port Scan Hacking
🇬🇧 gbzret4d	2026-04-23 20:28:03 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 9974 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0 ... show more Honeypot [uk-production01]: HTTP/1.1 request on 9974 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 9974 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 Bankbook8585	2026-04-23 19:27:08 (1 month ago)	T-Pot honeypot \| Dionaea honeypot: mqttd	Port Scan Hacking
🇷🇺 6o6ep	2026-04-23 15:32:06 (1 month ago)	bad request	Port Scan Hacking Bad Web Bot Web App Attack
🇩🇪 Progetto1	2026-04-23 13:05:01 (1 month ago)	Detected via HAProxyScanner at 2026-04-23 13:05:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-04-23 13:05:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force

Showing 1 to 15 of 241 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a04:c300:400::1ff

🇺🇸 2607:f8b0:400e:c08::12d

🇳🇱 185.213.175.168

🇺🇸 162.243.228.110

🇨🇳 119.96.158.238

🇺🇸 107.175.220.67

🇨🇦 104.255.152.19

🇺🇸 100.28.191.174

🇺🇸 64.62.156.24

🇯🇵 45.192.198.109

🇳🇱 45.148.10.147

🇩🇪 45.8.68.75

🇺🇸 20.55.87.139

🇻🇳 14.177.20.226

🇹🇭 223.205.233.80

🇬🇧 185.157.232.100

🇺🇸 162.216.149.40

🇹🇼 60.199.224.55

🇨🇳 39.130.240.179

🇨🇳 36.136.56.161