JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.174.22

159.89.174.22 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 14%: ?

14%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇮🇳 India
City	Bengaluru, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.174.22

Whois 159.89.174.22

IP Abuse Reports for 159.89.174.22:

This IP address has been reported a total of 21 times from 16 distinct sources. 159.89.174.22 was first reported on March 15th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 Agrohim	2026-08-24 01:34:01 (1 week ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-07-13 04:50:55 (1 month ago)	tcp/8089	Port Scan
🇺🇸 Axel	2026-07-13 04:31:36 (1 month ago)	Blocked by UFW on LAXHH [3389/tcp] \| SPT: 61012 \| TTL: 237 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [3389/tcp] \| SPT: 61012 \| TTL: 237 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Asthriona	2026-03-18 09:44:00 (5 months ago)	Mar 18 10:42:26 Ina sshd[49342]: Failed password for root from 159.89.174.22 port 34912 ssh2 Mar 18 ... show more Mar 18 10:42:26 Ina sshd[49342]: Failed password for root from 159.89.174.22 port 34912 ssh2 Mar 18 10:43:13 Ina sshd[49393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.174.22 user=root Mar 18 10:43:14 Ina sshd[49393]: Failed password for root from 159.89.174.22 port 49930 ssh2 Mar 18 10:43:58 Ina sshd[49427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.174.22 user=root Mar 18 10:43:59 Ina sshd[49427]: Failed password for root from 159.89.174.22 port 59490 ssh2 ... show less	Brute-Force SSH
🇸🇬 sh97	2026-03-18 09:43:59 (5 months ago)	SG05-ON: SSH Brute Force from 159.89.174.22 at 2026-03-18 15:13:59 IST	Brute-Force SSH
🇸🇪 paradoxnetworks	2026-03-18 09:41:47 (5 months ago)	2026-03-18T09:40:56.712558+00:00 edge-con-sto01.int.pdx.net.uk sshd[2289923]: Failed password for ro ... show more 2026-03-18T09:40:56.712558+00:00 edge-con-sto01.int.pdx.net.uk sshd[2289923]: Failed password for root from 159.89.174.22 port 54574 ssh2 2026-03-18T09:41:45.437992+00:00 edge-con-sto01.int.pdx.net.uk sshd[2289977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.174.22 user=root 2026-03-18T09:41:47.196564+00:00 edge-con-sto01.int.pdx.net.uk sshd[2289977]: Failed password for root from 159.89.174.22 port 53932 ssh2 ... show less	Brute-Force SSH
🇺🇸 MichaelRogers	2026-03-18 09:40:44 (5 months ago)	RTTMonitor Honeypot detected suspicious activity. Action: ssh-connect Protocol: SSH Username: unknow ... show more RTTMonitor Honeypot detected suspicious activity. Action: ssh-connect Protocol: SSH Username: unknown show less	Brute-Force SSH
🇵🇱 axiomofchoice.xyz	2026-03-18 09:37:37 (5 months ago)	endlessh trap: attempts=1 total_time_stuck=20.021s	Port Scan SSH Hacking
🇫🇷 masterguru	2026-02-08 08:28:59 (6 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.89.174.22 (IN/India/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.89.174.22 (IN/India/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇩🇪 celestialcity	2025-10-04 09:36:36 (10 months ago)	Blocked by UFW on CelestialCity [8081/tcp] Source port: 61013 TTL: 238 Packet length: 44 TOS: 0x00 ... show more Blocked by UFW on CelestialCity [8081/tcp] Source port: 61013 TTL: 238 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2025-10-04 09:20:48 (10 months ago)	tcp/8088 (2 or more attempts)	Port Scan
🇺🇸 MPL	2025-10-04 08:26:52 (10 months ago)	tcp/8808 (3 or more attempts)	Port Scan
🇺🇸 RAP	2025-08-21 07:10:16 (1 year ago)	2025-08-21 07:10:16 UTC Unauthorized activity to TCP port 8088. Web App	Port Scan Web App Attack
🇨🇭 GAS	2025-08-21 07:04:31 (1 year ago)	159.89.174.22 - - [21/Aug/2025:09:04:25 +0200] "GET / HTTP/1.1" 500 3709 "-" "Mozilla/5.0 (X11; Linu ... show more 159.89.174.22 - - [21/Aug/2025:09:04:25 +0200] "GET / HTTP/1.1" 500 3709 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 159.89.174.22 - - [21/Aug/2025:09:04:30 +0200] "GET /favicon.ico HTTP/1.1" 500 3707 "https://81.221.212.199/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" ... show less	Port Scan
🇺🇸 MPL	2025-08-21 06:51:13 (1 year ago)	tcp ports: 8808,1883 (3 or more attempts)	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.149.179.112

🇺🇸 195.184.76.132

🇳🇱 176.65.148.93

🇵🇭 165.154.33.72

🇨🇳 116.179.32.107

🇵🇭 103.62.153.200

🇹🇼 103.38.20.42

🇱🇹 77.90.185.16

🇺🇸 73.183.115.109

🇩🇪 45.135.194.24

🇧🇪 34.14.74.140

🇬🇧 5.226.140.48

🇷🇼 197.243.14.52

🇺🇸 172.191.178.196

🇫🇮 147.185.133.60

🇺🇸 147.185.132.60

🇨🇳 111.29.38.32

🇨🇳 106.117.110.217

🇳🇱 93.174.95.106

🇫🇷 91.231.89.234