JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.13.173

159.89.13.173 was found in our database!

This IP was reported 69 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.13.173

Whois 159.89.13.173

IP Abuse Reports for 159.89.13.173:

This IP address has been reported a total of 69 times from 53 distinct sources. 159.89.13.173 was first reported on August 11th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-03-02 20:11:51 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇦🇹 urnilxfgbez	2026-03-01 23:45:00 (3 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 knock	2026-03-01 14:20:29 (3 months ago)	SSH honeypot brute-force attempt (100 total hits)	Brute-Force SSH
🇦🇹 siprof	2026-03-01 14:13:28 (3 months ago)	Mar 1 15:12:27 server sshd[1258202]: Failed password for invalid user pi from 159.89.13.173 port 60 ... show more Mar 1 15:12:27 server sshd[1258202]: Failed password for invalid user pi from 159.89.13.173 port 60686 ssh2 Mar 1 15:12:55 server sshd[1258205]: Invalid user pi from 159.89.13.173 port 39074 Mar 1 15:12:55 server sshd[1258205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.13.173 Mar 1 15:12:58 server sshd[1258205]: Failed password for invalid user pi from 159.89.13.173 port 39074 ssh2 Mar 1 15:13:28 server sshd[1258225]: Invalid user pi from 159.89.13.173 port 43324 ... show less	Brute-Force SSH
🇨🇦 hpg	2026-03-01 13:57:56 (3 months ago)	92 invalid SSH login attempts from 159.89.13.173 in the last 0.6 hours	Brute-Force SSH
🇫🇮 6kilowatti	2026-03-01 13:55:56 (3 months ago)	2026-03-01T15:55:53.216231+02:00 koti sshd[543557]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-03-01T15:55:53.216231+02:00 koti sshd[543557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.13.173 2026-03-01T15:55:55.404718+02:00 koti sshd[543557]: Failed password for invalid user test from 159.89.13.173 port 53016 ssh2 ... show less	Brute-Force SSH
🇦🇹 siprof	2026-03-01 13:51:08 (3 months ago)	Mar 1 14:50:09 server sshd[1257306]: Failed password for invalid user user from 159.89.13.173 port ... show more Mar 1 14:50:09 server sshd[1257306]: Failed password for invalid user user from 159.89.13.173 port 59418 ssh2 Mar 1 14:50:38 server sshd[1257310]: Invalid user user from 159.89.13.173 port 50790 Mar 1 14:50:38 server sshd[1257310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.13.173 Mar 1 14:50:39 server sshd[1257310]: Failed password for invalid user user from 159.89.13.173 port 50790 ssh2 Mar 1 14:51:08 server sshd[1257325]: Invalid user user from 159.89.13.173 port 51486 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-03-01 13:50:19 (3 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-03-01 13:42:35 (3 months ago)	SSH brute-force: 5 failed login attempts. Port: 22 (SSH). Timestamp: 1772372554.983685 UTC. ASN: 140 ... show more SSH brute-force: 5 failed login attempts. Port: 22 (SSH). Timestamp: 1772372554.983685 UTC. ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC, US). show less	Brute-Force SSH
🇨🇳 pengpeng	2026-03-01 13:42:16 (3 months ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
🇨🇭 Auki_cat	2026-03-01 13:41:23 (3 months ago)	2026-03-01T13:40:03.713796+00:00 ov-6e67e7 sshd[1919027]: Invalid user admin from 159.89.13.173 port ... show more 2026-03-01T13:40:03.713796+00:00 ov-6e67e7 sshd[1919027]: Invalid user admin from 159.89.13.173 port 34442 2026-03-01T13:40:45.358274+00:00 ov-6e67e7 sshd[1919213]: Invalid user admin from 159.89.13.173 port 55732 2026-03-01T13:41:23.317041+00:00 ov-6e67e7 sshd[1919500]: Invalid user admin from 159.89.13.173 port 50562 show less	Brute-Force SSH
🇺🇸 lavnet.net	2026-03-01 13:41:05 (3 months ago)	2026-03-01T13:39:43.292074+00:00 fleur.lavnet.net sshd[4067545]: Invalid user admin from 159.89.13.1 ... show more 2026-03-01T13:39:43.292074+00:00 fleur.lavnet.net sshd[4067545]: Invalid user admin from 159.89.13.173 port 42158 2026-03-01T13:40:25.166819+00:00 fleur.lavnet.net sshd[4067674]: Invalid user admin from 159.89.13.173 port 40120 2026-03-01T13:41:04.706602+00:00 fleur.lavnet.net sshd[4067712]: Invalid user admin from 159.89.13.173 port 38934 ... show less	SSH
Anonymous	2026-03-01 13:40:47 (3 months ago)	2026-03-01T14:40:04.047042+01:00 diazserver sshd[161605]: Failed password for invalid user admin fro ... show more 2026-03-01T14:40:04.047042+01:00 diazserver sshd[161605]: Failed password for invalid user admin from 159.89.13.173 port 38744 ssh2 2026-03-01T14:40:43.644640+01:00 diazserver sshd[161620]: Invalid user admin from 159.89.13.173 port 54906 2026-03-01T14:40:44.112737+01:00 diazserver sshd[161620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.13.173 2026-03-01T14:40:46.512368+01:00 diazserver sshd[161620]: Failed password for invalid user admin from 159.89.13.173 port 54906 ssh2 ... show less	Brute-Force SSH
🇱🇺 SiteXL	2026-03-01 13:36:02 (3 months ago)	{"event":{"DateTime":"2026-03-01T13:24:54Z","RemoteAddr":"159.89.13.173:45156","Protocol":"SSH","Com ... show more {"event":{"DateTime":"2026-03-01T13:24:54Z","RemoteAddr":"159.89.13.173:45156","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"e00023d2-ede8-4e48-9c35-fff7859f8a84","Environ":"","User":"root","Password":"root","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"159.89.13.173","SourcePort":"45156","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2026-03-01T13:24:55Z","RemoteAddr":"159.89.13.173:45156","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Start","Msg":"New SSH Terminal Session","ID":"c20374bf-35e8-4f74-81bc-4d87bc9a0bf9","Environ":"","User":"root","Password":"","Client":"","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"159 show less	Hacking Port Scan Brute-Force SSH
🇵🇱 Niko's Stuff	2026-03-01 13:30:04 (3 months ago)	Triggered crowdsecurity/ssh-slow-bf. More information at: https://app.crowdsec.net/cti/159.89.13.173	SSH Brute-Force

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.220

🇧🇪 35.205.152.232

🇺🇸 20.163.16.165

🇦🇹 2a03:e600:100::12

🇺🇸 195.184.76.117

🇯🇵 103.125.146.43

🇬🇭 102.221.30.186

🇪🇪 80.79.125.77

🇺🇸 43.153.13.30

🇮🇱 20.217.83.47

🇮🇳 182.75.215.245

🇰🇷 112.169.208.106

🇵🇰 103.193.18.18

🇮🇳 103.127.30.137

🇳🇱 91.92.40.6

🇮🇪 34.242.28.35

🇺🇸 34.125.161.182

🇰🇷 218.144.90.43

🇹🇼 198.235.24.87

🇬🇧 193.163.125.19