JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.154.198

159.89.154.198 was found in our database!

This IP was reported 235 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	prod-barium-sfo2-11.do.binaryedge.ninja
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.154.198

Whois 159.89.154.198

IP Abuse Reports for 159.89.154.198:

This IP address has been reported a total of 235 times from 92 distinct sources. 159.89.154.198 was first reported on May 15th 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Axel	2026-07-14 02:14:42 (12 minutes ago)	Blocked by UFW on LAXHH [3311/tcp] \| SPT: 54438 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [3311/tcp] \| SPT: 54438 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 urnilxfgbez	2026-07-13 22:45:00 (3 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-07-13 19:17:51 (7 hours ago)	tcp/139	Port Scan
🇩🇪 ipcop.net	2026-07-13 13:34:50 (12 hours ago)	2026-07-13T15:34:48.030257+02:00 gw9.nodesafety.com sshd-session[1229372]: Unable to negotiate with ... show more 2026-07-13T15:34:48.030257+02:00 gw9.nodesafety.com sshd-session[1229372]: Unable to negotiate with 159.89.154.198 port 37612: no matching host key type found. Their offer: ssh-dss [preauth] 2026-07-13T15:34:48.609852+02:00 gw9.nodesafety.com sshd-session[1229376]: Connection closed by 159.89.154.198 port 37618 [preauth] 2026-07-13T15:34:49.152144+02:00 gw9.nodesafety.com sshd-session[1229377]: Connection closed by 159.89.154.198 port 37632 [preauth] 2026-07-13T15:34:49.681578+02:00 gw9.nodesafety.com sshd-session[1229373]: Connection closed by 159.89.154.198 port 37646 [preauth] 2026-07-13T15:34:49.840203+02:00 gw9.nodesafety.com sshd-session[1229374]: Unable to negotiate with 159.89.154.198 port 37660: no matching host key type found. Their offer: [email protected] [preauth] show less	Brute-Force
Anonymous	2026-07-13 13:30:15 (12 hours ago)	2026-07-13T10:30:13.077693-03:00 web sshd[98701]: Unable to negotiate with 159.89.154.198 port 42602 ... show more 2026-07-13T10:30:13.077693-03:00 web sshd[98701]: Unable to negotiate with 159.89.154.198 port 42602: no matching host key type found. Their offer: ssh-dss [preauth] 2026-07-13T10:30:13.560410-03:00 web sshd[98698]: Connection closed by 159.89.154.198 port 42620 [preauth] 2026-07-13T10:30:14.270012-03:00 web sshd[98703]: Connection closed by 159.89.154.198 port 42614 [preauth] ... show less	Brute-Force SSH
🇹🇭 Sawasdee	2026-07-13 12:39:06 (13 hours ago)	SSH break in attempt ...	SSH
🇺🇸 RAP	2026-07-13 12:25:03 (14 hours ago)	2026-07-13 12:25:03 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 Axel	2026-07-13 11:32:41 (14 hours ago)	Blocked by UFW on LAXHH [21/tcp] \| SPT: 42101 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on LAXHH [21/tcp] \| SPT: 42101 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan FTP Brute-Force
🇺🇸 Axel	2026-07-11 18:06:09 (2 days ago)	Blocked by UFW on LAXHH [80/tcp] \| SPT: 52317 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on LAXHH [80/tcp] \| SPT: 52317 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 mnazibo	2026-07-11 07:30:12 (2 days ago)	Date: Jul 11 10:24:12 2026 EAT \| Reported IP: 159.89.154.198 mod_security \| id: 920340 920350 920640 ... show more Date: Jul 11 10:24:12 2026 EAT \| Reported IP: 159.89.154.198 mod_security \| id: 920340 920350 920640 949110 \| US/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Content-Type header missing from request with non-zero Content-Length; Host header is a numeric IP address; Content-Type header missing from request with body; Inbound Anomaly Score Exceeded (Total Score: 13) show less	SQL Injection Brute-Force Bad Web Bot
🇺🇸 gu-alvareza	2026-07-11 07:05:18 (2 days ago)	Nmap.Script.Scanner	Port Scan
🇸🇪 Esko	2026-07-11 03:53:53 (2 days ago)	159.89.154.198 - - [11/Jul/2026:03:53:53 +0000] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Macintosh ... show more 159.89.154.198 - - [11/Jul/2026:03:53:53 +0000] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" show less	Port Scan
🇪🇸 librebit	2026-07-07 21:03:51 (6 days ago)	Brute force	Brute-Force
🇸🇰 HILKA	2026-07-07 14:30:07 (6 days ago)	Automatic report from HLK firewall log.	Port Scan Hacking Brute-Force
🇺🇸 RAP	2026-07-07 09:24:52 (6 days ago)	2026-07-07 09:24:52 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack

Showing 1 to 15 of 235 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 18.202.30.198

🇺🇿 213.230.80.11

🇧🇪 207.175.18.105

🇧🇷 205.210.31.163

🇯🇵 172.253.199.153

🇨🇳 101.34.229.53

🇺🇸 96.78.175.45

🇳🇱 85.11.167.7

🇺🇿 84.54.86.165

🇳🇱 45.198.224.92

🇺🇸 34.86.153.195

🇧🇷 205.210.31.221

🇲🇽 189.201.193.218

🇹🇭 182.53.207.106

🇵🇱 176.53.159.196

🇺🇸 162.216.149.251

🇮🇩 157.85.212.129

🇱🇹 81.30.98.44

🇺🇸 69.164.210.175

🇱🇹 62.60.130.219