JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.193.17

159.89.193.17 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.193.17

Whois 159.89.193.17

IP Abuse Reports for 159.89.193.17:

This IP address has been reported a total of 45 times from 31 distinct sources. 159.89.193.17 was first reported on February 12th 2026, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bazter.pro	2026-03-18 22:31:01 (6 months ago)	Auto-Ban [2026-03-19 00:30:56]: CRITICAL: Sensitive files (3); DC: DigitalOcean, LLC [Paths: 7] \| De ... show more Auto-Ban [2026-03-19 00:30:56]: CRITICAL: Sensitive files (3); DC: DigitalOcean, LLC [Paths: 7] \| Details: Sensitive files/paths: /wp-admin/, /wp-login.php?redirect_to=https%3A%2F%2Fblog.it-srv.org%2Fwp-admin%2F&reauth=1, /wp-admin/ \| 404 errors (1): / \| 403 errors (3): /wp-content/uploads/, /wp-includes/, /wp-admin/ \| Other paths: /wp-content/plugins/, /wp-content/themes/, /wp-login.php?redirect_to=https%3A%2F%2Fblog.it-srv.org%2Fwp-admin%2F&reauth=1 show less	Web App Attack Hacking
🇬🇧 consul.to	2026-03-13 09:44:27 (6 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 MuttMutt	2026-03-13 02:31:00 (6 months ago)	Automated subdomain enumeration and infrastructure reconnaissance originating from DigitalOcean. Act ... show more Automated subdomain enumeration and infrastructure reconnaissance originating from DigitalOcean. Actor is rapid-firing requests across a wide range of common subdomain prefixes (e.g., autodiscover, webdisk, cpanel, forum, home) in a single second. This high-velocity probing is used to map out the attack surface for targeted vulnerability exploitation. show less	Web App Attack
🇬🇧 consul.to	2026-03-12 07:23:29 (6 months ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 melroy89	2026-03-12 05:53:25 (6 months ago)	159.89.193.17 - - [12/Mar/2026:06:52:24 +0100] "GET / HTTP/1.1" 403 9 "-" "WP-Safe-Scanner/2.0" "bi ... show more 159.89.193.17 - - [12/Mar/2026:06:52:24 +0100] "GET / HTTP/1.1" 403 9 "-" "WP-Safe-Scanner/2.0" "bitcoin.melroy.org" 0.000 159.89.193.17 - - [12/Mar/2026:06:52:26 +0100] "GET / HTTP/1.1" 403 9 "-" "WP-Safe-Scanner/2.0" "erp.melroy.org" 0.000 159.89.193.17 - - [12/Mar/2026:06:52:26 +0100] "GET / HTTP/1.1" 403 146 "-" "WP-Safe-Scanner/2.0" "erp-backend-acc.melroy.org" 0.000 159.89.193.17 - - [12/Mar/2026:06:52:28 +0100] "GET / HTTP/1.1" 403 9 "-" "WP-Safe-Scanner/2.0" "office.melroy.org" 0.000 159.89.193.17 - - [12/Mar/2026:06:52:28 +0100] "GET / HTTP/1.1" 403 9 "-" "WP-Safe-Scanner/2.0" "node.melroy.org" 0.000 159.89.193.17 - - [12/Mar/2026:06:52:28 +0100] "GET / HTTP/1.1" 403 9 "-" "WP-Safe-Scanner/2.0" "reviews.melroy.org" 0.000 159.89.193.17 - - [12/Mar/2026:06:52:28 +0100] "GET / HTTP/1.1" 403 9 "-" "WP-Safe-Scanner/2.0" "review.melroy.org" 0.000 159.89.193.17 - - [12/Mar/2026:06:52:28 +0100] "GET / HTTP/1.1" 403 9 "-" "WP-Safe-Scanner/2.0" "pxtr.melroy.org" 0.000 159.89.193 ... show less	Web App Attack
🇨🇿 ddw	2026-03-11 16:02:09 (6 months ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-03-10 14:04:04 (6 months ago)	Bot / scanning and/or hacking attempts: GET /wp-admin/ HTTP/1.1, GET /wp-content/uploads/ HTTP/1.1, ... show more Bot / scanning and/or hacking attempts: GET /wp-admin/ HTTP/1.1, GET /wp-content/uploads/ HTTP/1.1, GET / HTTP/1.1, GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.kukura.org%2Fwp show less	Hacking Web App Attack
🇭🇺 kranem	2026-03-10 12:00:55 (6 months ago)	Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, L ... show more Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-03-10T10:49:16Z User-Agent: WP-Safe-Scanner/2.0 show less	Bad Web Bot
🇫🇷 solution.it	2026-03-09 16:46:40 (6 months ago)	[Mon Mar 09 17:46:39.842780 2026] [php7:error] [pid 1971689:tid 1971689] [client 159.89.193.17:52290 ... show more [Mon Mar 09 17:46:39.842780 2026] [php7:error] [pid 1971689:tid 1971689] [client 159.89.193.17:52290] script '/var/www/html/internetriders.org/wp-login.php' not found or unable to stat show less	Web App Attack
🇫🇮 JimArchon72	2026-03-08 16:25:02 (6 months ago)	2026/03/08 16:22:39 "GET /wp-admin/ HTTP/1.1"	Web App Attack
🇩🇪 mk-dizajn.hr	2026-03-08 05:38:04 (6 months ago)	$f2bV_matches	Bad Web Bot
🇬🇧 consul.to	2026-03-08 05:09:45 (6 months ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇹 mgarofano80	2026-03-07 00:40:37 (6 months ago)		Brute-Force Web App Attack
🇬🇧 consul.to	2026-03-06 23:34:54 (6 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 kosada.com	2026-03-06 12:32:21 (6 months ago)	Web vulnerability probing: /wp-content/themes/	Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 45.182.4.190

🇰🇪 41.203.213.8

🇫🇷 20.43.35.101

🇳🇱 213.134.252.8

🇺🇸 191.101.241.242

🇫🇷 162.159.122.132

🇷🇺 151.252.84.225

🇨🇳 118.145.246.44

🇰🇷 106.243.155.71

🇮🇩 103.173.162.85

🇭🇷 93.137.43.166

🇫🇷 91.231.89.115

🇺🇸 91.92.243.20

🇺🇸 45.156.129.139

🇺🇸 45.156.129.138

🇴🇲 37.41.33.112

🇮🇷 31.47.55.133

🇺🇸 20.150.194.114

🇺🇸 20.65.202.50

🇨🇳 14.103.107.234