JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.172.48

159.89.172.48 was found in our database!

This IP was reported 445 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇮🇳 India
City	Bashettihalli, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.172.48

Whois 159.89.172.48

IP Abuse Reports for 159.89.172.48:

This IP address has been reported a total of 445 times from 161 distinct sources. 159.89.172.48 was first reported on May 22nd 2024, and the most recent report was 20 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-02 04:23:49 (20 minutes ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇳🇱 Site.eu	2026-07-02 04:22:08 (22 minutes ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-02 03:14:44 (1 hour ago)	[Thu Jul 02 05:14:42.993811 2026] [authz_core:error] [pid 87899:tid 87948] [client 159.89.172.48:605 ... show more [Thu Jul 02 05:14:42.993811 2026] [authz_core:error] [pid 87899:tid 87948] [client 159.89.172.48:60540] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php ... show less	Brute-Force Web App Attack
🇩🇪 Hazzard	2026-07-02 03:05:48 (1 hour ago)	(PERMBLOCK) 159.89.172.48 (IN/India/Karnataka/Bengaluru/-/[redacted]) has had more than 4 temp block ... show more (PERMBLOCK) 159.89.172.48 (IN/India/Karnataka/Bengaluru/-/[redacted]) has had more than 4 temp blocks show less	Hacking
🇺🇸 TPI-Abuse	2026-07-02 01:30:08 (3 hours ago)	(mod_security) mod_security (id:225170) triggered by 159.89.172.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 159.89.172.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 21:29:58.888948 2026] [security2:error] [pid 12695:tid 12695] [client 159.89.172.48:41408] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|brbvip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brbvip.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akW_FgXvKOSGdLvpxkwECAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-02 01:27:07 (3 hours ago)	(wordpress) Apache: Failed WordPress login from 159.89.172.48 (IN/India/-): 10 in the last 3600 secs ... show more (wordpress) Apache: Failed WordPress login from 159.89.172.48 (IN/India/-): 10 in the last 3600 secs (0-197) show less	Hacking
Anonymous	2026-07-02 00:54:47 (3 hours ago)	[Thu Jul 02 02:54:46.351658 2026] [authz_core:error] [pid 44746:tid 44907] [client 159.89.172.48:571 ... show more [Thu Jul 02 02:54:46.351658 2026] [authz_core:error] [pid 44746:tid 44907] [client 159.89.172.48:57190] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php [Thu Jul 02 02:54:46.727657 2026] [authz_core:error] [pid 44746:tid 44885] [client 159.89.172.48:57190] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: https://akcurate.de/wordpress/wp-login.php ... show less	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-07-02 00:30:40 (4 hours ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 LRob.fr	2026-07-02 00:02:50 (4 hours ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇫🇷 Yepngo	2026-07-01 22:15:14 (6 hours ago)	159.89.172.48 - - [02/Jul/2026:00:15:13 +0200] "POST /wp-login.php HTTP/2.0" 200 11374 "https://blog ... show more 159.89.172.48 - - [02/Jul/2026:00:15:13 +0200] "POST /wp-login.php HTTP/2.0" 200 11374 "https://blog.yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇨🇦 KIsmay	2026-07-01 22:14:25 (6 hours ago)	Jul 1 15:14:54 www4 WPAudit[4017003]: 159.89.172.48 www.terratherma.com "Mozilla/5.0 (X11; Linux x8 ... show more Jul 1 15:14:54 www4 WPAudit[4017003]: 159.89.172.48 www.terratherma.com "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" sbd-admin:Sbd-admin@2021 FAIL Jul 1 15:36:49 www4 WPAudit[4019377]: 159.89.172.48 vhsport.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" vhsport:vhsport8 FAIL Jul 1 15:45:21 www4 WPAudit[4020644]: 159.89.172.48 www.katharinedickerson.com "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" sbd-admin:sbd-admin4 FAIL Jul 1 16:26:27 www4 WPAudit[4025219]: 159.89.172.48 imaginesalmon.com "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" sbd-admin:sbd-admin2012 FAIL Jul 1 18:14:24 www4 WPAudit[4037574]: 159.89.172.48 www.vhsport.ca "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0. ... show less	Brute-Force Web App Attack
🇫🇷 tecnicorioja	2026-07-01 22:01:28 (6 hours ago)	wp-login attack [01/Jul/2026:13:48:50	Brute-Force Web App Attack
🇩🇪 brechtr	2026-07-01 21:56:51 (6 hours ago)	[Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login. ... show more [Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login.php show less	Brute-Force
Anonymous	2026-07-01 20:58:14 (7 hours ago)	[Wed Jul 01 22:24:21.971160 2026] [authz_core:error] [pid 139600:tid 139630] [client 159.89.172.48:3 ... show more [Wed Jul 01 22:24:21.971160 2026] [authz_core:error] [pid 139600:tid 139630] [client 159.89.172.48:39900] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Wed Jul 01 22:58:12.864847 2026] [authz_core:error] [pid 87899:tid 87950] [client 159.89.172.48:45210] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Wed Jul 01 22:58:13.198743 2026] [authz_core:error] [pid 87899:tid 87944] [client 159.89.172.48:45210] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://cimt-precision.de/wp-login.php ... show less	Brute-Force Web App Attack
🇩🇪 bsoft.de	2026-07-01 20:35:46 (8 hours ago)	159.89.172.48 - - [01/Jul/2026:22:32:58 +0200] "GET /wp-login.php HTTP/1.1" 404 130564 "-" "Mozilla/ ... show more 159.89.172.48 - - [01/Jul/2026:22:32:58 +0200] "GET /wp-login.php HTTP/1.1" 404 130564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 159.89.172.48 - - [01/Jul/2026:22:35:43 +0200] "GET /wp-login.php HTTP/1.1" 200 8698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 159.89.172.48 - - [01/Jul/2026:22:35:46 +0200] "POST /wp-login.php HTTP/1.1" 200 9156 "https://kgsjw-freunde.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 445 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2001:41d0:303:6f20::1

🇮🇳 223.233.84.221

🇺🇸 205.210.31.94

🇬🇧 195.206.182.199

🇺🇸 165.22.146.146

🇫🇮 147.185.133.202

🇵🇰 110.38.250.134

🇷🇴 92.118.39.74

🇸🇪 91.218.123.237

🇪🇸 77.74.229.158

🇨🇳 47.95.212.173

🇸🇬 47.84.111.160

🇺🇸 45.148.124.88

🇳🇱 45.148.10.157

🇯🇵 8.216.8.151

🇷🇴 2.57.121.25

🇧🇷 2800:3f0:4001:c0f::129

🇧🇷 205.210.31.198

🇺🇸 205.210.31.88

🇲🇽 189.146.63.139