159.89.172.47
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇮🇳 India
- City
- Bengaluru, Karnataka
Abuse Reports
Total reports
3,236 from
280 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (8888/tcp) [non-standard port]
|
Web App Attack | |
| Anonymous |
4321/tcp (1 or more attempts)
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 5555.
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 18789.
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/80 (3 or more attempts)
|
Port Scan | |
| 🇩🇪 FBI_CyberUnit |
Multiple failed SSH login attempts
|
Brute-Force SSH | |
| 🇩🇪 FBI_CyberUnit |
Automated SSH credential stuffing detected
|
Brute-Force SSH | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇺🇸 kot |
scan port 22, 159.89.172.47 block
|
Port Scan | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| 🇵🇱 nfsec.pl |
Detected: TCP scan on port: 8080 with flags: SYN
|
Port Scan | |
| 🇭🇺 kranem |
|
Brute-Force SSH | |
| 🇩🇪 sh97 |
kvm13700: SSH Brute Force from 159.89.172.47 at 2026-02-21 18:53:00 IST
|
Brute-Force SSH | |
| 🇩🇪 Singha58 |
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown