This IP address has been reported a total of
122
times from
84 distinct
sources.
159.89.173.45 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Port scan / connection attempts on ports 22/TCP, 465/TCP, 5552/TCP, 5555/TCP, 7000/TCP, 8881/TCP to ...
show morePort scan / connection attempts on ports 22/TCP, 465/TCP, 5552/TCP, 5555/TCP, 7000/TCP, 8881/TCP to unused IP
show less
2026-03-09T00:08:02.410753+01:00 tytan sshd-session[2504798]: Connection closed by authenticating us ...
show more2026-03-09T00:08:02.410753+01:00 tytan sshd-session[2504798]: Connection closed by authenticating user root 159.89.173.45 port 36158 [preauth]
2026-03-09T00:10:07.802259+01:00 tytan sshd-session[2793235]: Invalid user 0000 from 159.89.173.45 port 53276
2026-03-09T00:10:07.990845+01:00 tytan sshd-session[2793235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.173.45
2026-03-09T00:10:09.695337+01:00 tytan sshd-session[2793235]: Failed password for invalid user 0000 from 159.89.173.45 port 53276 ssh2
2026-03-09T00:10:10.364119+01:00 tytan sshd-session[2793235]: Connection closed by invalid user 0000 159.89.173.45 port 53276 [preauth]
...
show less
2026-03-08T22:33:37.143365+01:00 PRACSNew sshd-session[4057836]: Invalid user oracle from 159.89.173 ...
show more2026-03-08T22:33:37.143365+01:00 PRACSNew sshd-session[4057836]: Invalid user oracle from 159.89.173.45 port 45440
2026-03-08T22:33:37.391859+01:00 PRACSNew sshd-session[4057836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.173.45
2026-03-08T22:33:39.333812+01:00 PRACSNew sshd-session[4057836]: Failed password for invalid user oracle from 159.89.173.45 port 45440 ssh2
...
show less
Mar 8 22:03:26 box sshd[1175009]: Failed password for invalid user 0000 from 159.89.173.45 port 598 ...
show moreMar 8 22:03:26 box sshd[1175009]: Failed password for invalid user 0000 from 159.89.173.45 port 59888 ssh2
Mar 8 22:03:31 box sshd[1175079]: Invalid user 123456 from 159.89.173.45 port 59900
Mar 8 22:03:31 box sshd[1175079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.173.45
Mar 8 22:03:33 box sshd[1175079]: Failed password for invalid user 123456 from 159.89.173.45 port 59900 ssh2
Mar 8 22:03:35 box sshd[1175127]: Invalid user a from 159.89.173.45 port 46820
Mar 8 22:03:36 box sshd[1175127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.173.45
Mar 8 22:03:37 box sshd[1175127]: Failed password for invalid user a from 159.89.173.45 port 46820 ssh2
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
Anonymous
2026-03-08T22:03:24.623046+01:00 PRACSNew sshd-session[4051403]: Invalid user 0000 from 159.89.173.4 ...
show more2026-03-08T22:03:24.623046+01:00 PRACSNew sshd-session[4051403]: Invalid user 0000 from 159.89.173.45 port 36534
2026-03-08T22:03:24.803327+01:00 PRACSNew sshd-session[4051403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.173.45
2026-03-08T22:03:27.535172+01:00 PRACSNew sshd-session[4051403]: Failed password for invalid user 0000 from 159.89.173.45 port 36534 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 122 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩