JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.89.198.75

Neutral Activity

Abuse confidence score ?

0% Low Risk

884 reports

324 reporters · latest 5 months ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.89.198.75 has been reported 884 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 159.89.198.75

Export CSV

This IP address has been reported a total of 884 times from 324 distinct sources. 159.89.198.75 was first reported on January 21st 2024, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-05-06 02:46:18 (5 months ago)	2026-05-05 00:04:41 //citrabenuanta.bulungan.go.id:443:443 2026-05-05 00:42:29 //mediacenter.rohilka ... show more 2026-05-05 00:04:41 //citrabenuanta.bulungan.go.id:443:443 2026-05-05 00:42:29 //mediacenter.rohilkab.go.id:443:443 2026-05-05 00:57:32 //journal.umg.ac.id:443 2026-05-05 00:16:26 //www.mioni.it:443:443 2026-05-05 00:29:47 //ess.depedmarikina.ph:443 2026-05-05 00:56:38 //jurnal.una.ac.id:443:443 2026-05-05 00:14:30 //journal.umg.ac.id:443 2026-05-05 00:24:58 //journal.umg.ac.id:443 2026-05-05 00:10:18 //citrabenuanta.bulungan.go.id:443:443 2026-05-05 00:23:08 //www.greenhero.com:443:443 show less	Web App Attack
🇺🇸 Rayulcifer	2026-05-05 10:21:03 (5 months ago)	159.89.198.75 - - [05/May/2026:05:20:02 -0500] "CONNECT journal.umg.ac.id:443 HTTP/1.1" 502 488 "-" ... show more 159.89.198.75 - - [05/May/2026:05:20:02 -0500] "CONNECT journal.umg.ac.id:443 HTTP/1.1" 502 488 "-" "-" 159.89.198.75 - - [05/May/2026:05:20:02 -0500] "\x16\x03\x01" 400 392 "-" "-" 159.89.198.75 - - [05/May/2026:05:20:55 -0500] "CONNECT journal.umg.ac.id:443 HTTP/1.1" 502 488 "-" "-" 159.89.198.75 - - [05/May/2026:05:20:55 -0500] "\x16\x03\x01" 400 392 "-" "-" 159.89.198.75 - - [05/May/2026:05:21:02 -0500] "CONNECT bonhomiewine.com:443:443 HTTP/1.1" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 xmission.com	2026-05-05 08:52:20 (5 months ago)	Blocked by UFW (TCP on 8118) Source port: 13536 TTL: 47 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8118) Source port: 13536 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 159.89.198.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-05 01:16:11 (5 months ago)	2026-05-04 00:40:03 //www.greenhero.com:443:443 2026-05-04 01:00:30 //marketplaceinvasion.com.au:443 ... show more 2026-05-04 00:40:03 //www.greenhero.com:443:443 2026-05-04 01:00:30 //marketplaceinvasion.com.au:443:443 2026-05-04 00:35:54 //www.sakai-kawajiri.com:443:443 2026-05-04 00:51:13 //citrabenuanta.bulungan.go.id:443:443 2026-05-04 00:56:17 //diginichesolutions.com:443:443 2026-05-04 00:29:47 //journal.umg.ac.id:443:443 2026-05-04 00:01:55 //journal.umg.ac.id:443 2026-05-04 00:55:33 //www.sakai-kawajiri.com:443:443 2026-05-04 01:05:33 //ejournal.unsil.ac.id:443:443 2026-05-04 00:57:31 //twinpeakslodging.com:443:443 show less	Web App Attack
🇯🇵 demonsword	2026-05-04 21:34:08 (5 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.ntvspharmacy.ac.in:443 show less	Open Proxy Port Scan
🇺🇸 xmission.com	2026-05-04 16:03:59 (5 months ago)	Blocked by UFW (TCP on 8118) Source port: 16886 TTL: 47 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8118) Source port: 16886 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 159.89.198.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 demonsword	2026-05-03 19:35:06 (5 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.mioni.it:443:443 show less	Open Proxy Port Scan
🇺🇸 xmission.com	2026-05-03 14:44:39 (5 months ago)	Blocked by UFW (TCP on 8118) Source port: 36258 TTL: 44 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8118) Source port: 36258 TTL: 44 Packet length: 60 TOS: 0x08 This report (for 159.89.198.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 AS213449.net	2026-05-03 05:00:43 (5 months ago)	05/03/2026-07:00:43.089303 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH ... show more 05/03/2026-07:00:43.089303 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH Scan show less	Brute-Force SSH
🇩🇪 AS213449.net	2026-05-03 04:36:39 (5 months ago)	05/03/2026-06:36:39.067109 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH ... show more 05/03/2026-06:36:39.067109 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH Scan show less	Brute-Force SSH
🇩🇪 AS213449.net	2026-05-03 04:03:51 (5 months ago)	05/03/2026-06:03:50.957429 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH ... show more 05/03/2026-06:03:50.957429 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH Scan show less	Brute-Force SSH
🇩🇪 AS213449.net	2026-05-03 03:42:12 (5 months ago)	05/03/2026-05:42:12.442805 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH ... show more 05/03/2026-05:42:12.442805 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH Scan show less	Brute-Force SSH
🇩🇪 AS213449.net	2026-05-03 03:08:40 (5 months ago)	05/03/2026-05:08:40.795100 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH ... show more 05/03/2026-05:08:40.795100 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH Scan show less	Brute-Force SSH
🇩🇪 AS213449.net	2026-05-03 02:49:50 (5 months ago)	05/03/2026-04:49:50.546862 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH ... show more 05/03/2026-04:49:50.546862 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH Scan show less	Brute-Force SSH
🇩🇪 AS213449.net	2026-05-03 02:14:19 (5 months ago)	05/03/2026-04:14:19.063301 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH ... show more 05/03/2026-04:14:19.063301 src=159.89.198.75 dst=154.43.57.132:22 proto=6 msg=ET SCAN Potential SSH Scan show less	Brute-Force SSH

Showing 1 to 15 of 884 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 129.121.103.78

🇬🇧 77.67.26.238

🇺🇸 66.116.237.85

🇨🇭 209.99.190.186

🇧🇷 200.161.254.249

🇬🇧 200.138.46.157

🇺🇸 162.216.150.104

🇺🇸 147.185.132.137

🇨🇳 121.46.244.23

🇨🇳 117.62.22.127

🇩🇪 109.160.32.159

🇸🇪 89.160.102.155

🇺🇸 68.99.29.110

🇺🇸 66.132.195.29

🇫🇷 51.77.158.34

🇸🇬 47.84.110.140

🇸🇬 47.84.109.121

🇺🇸 23.191.200.93

🇬🇧 213.166.84.37

🇸🇬 139.59.234.78