159.89.17.23

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
29% Elevated
19 reports
14 reporters · latest 1 week ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
19 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇺🇸 United States of America 3 🇧🇷 Brazil 1
Most common categories Port Scan 9 Hacking 3 Exploited Host 2 VPN IP 1 Brute-Force 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-30 08:25, Last: 2026-11-03 19:39 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-20 19:36, Last: 2026-10-28 06:39 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: port scanning. First: 2026-10-04 14:53, Last: 2026-10-16 11:54 UTC. Triggers: non-public-port,firewall-udp,unknown.
Port Scan
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇷🇺 Laplus
Port scan; 1194/udp (1 or more attempts)
Port Scan Bad Web Bot
🇩🇪 Admins@Storch
IPS:drop <match> dstport=1194
Brute-Force Exploited Host
Anonymous
Tried our host z.
Port Scan Hacking Exploited Host
🇧🇷 Host One
T-Pot Honeypot alert: 1 malicious events (exploit_attempt) detected.
Hacking
Anonymous
Network service scanning detected by FortiGate; source quarantined.
Port Scan
Anonymous
2026-10-05 02:21:42 TLS Error: tls-crypt unwrapping failed from [AF_INET]159.89.17.23:63168 ...
VPN IP Port Scan
Anonymous
denied traffic to a honeypot network. destination port 1194.
Port Scan Hacking
🇺🇸 RAP
2026-06-16 02:02:48 UTC Unauthorized activity to TCP port 8443. Web App
Port Scan Web App Attack
🇺🇸 MPL
tcp/8001 (2 or more attempts)
Port Scan
🇬🇧 Joe-Mark
Found CINS badguys / proto=6 . srcport=61003 . dstport=443 HTTPS . packet filter (1161)
Port Scan
🇺🇸 MPL
tcp/14000 (3 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 189.56.195.78
🇫🇮 147.185.133.68
🇺🇸 35.252.76.193
🇧🇪 34.156.64.247
🇲🇽 201.110.5.105
🇧🇷 200.153.86.250
🇳🇱 185.218.86.14
🇺🇸 173.72.117.87
🇺🇸 142.147.216.129
🇺🇦 109.87.65.23
🇺🇸 70.37.51.121
🇺🇸 62.11.129.215
🇬🇧 45.133.173.97
🇬🇧 45.131.217.165
🇺🇸 216.180.246.229
🇳🇱 142.93.140.36
🇳🇱 109.160.32.148
🇧🇫 102.23.38.197
🇬🇧 5.252.83.110
🇳🇱 195.178.110.232
feedback