JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.200.103

159.89.200.103 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.200.103

Whois 159.89.200.103

IP Abuse Reports for 159.89.200.103:

This IP address has been reported a total of 17 times from 7 distinct sources. 159.89.200.103 was first reported on August 31st 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 beehivesafety	2024-09-12 19:07:23 (1 year ago)	Threat Blocked by BeeHive from (ASN:14061) (Network:DIGITALOCEAN-ASN) (Host:beehive.systems) (Method ... show more Threat Blocked by BeeHive from (ASN:14061) (Network:DIGITALOCEAN-ASN) (Host:beehive.systems) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2024-09-12T19:07:23Z) show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2024-09-11 13:28:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 11 09:28:07.154999 2024] [security2:error] [pid 15863:tid 15863] [client 159.89.200.103:49854] [client 159.89.200.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4lazytrafficschool.4lazy.com"] [uri "/prevlaravel/sftp-config.json"] [unique_id "ZuGa51UhhCx4r9ds2Wyl4gAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-11 10:02:57 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 11 06:02:50.632837 2024] [security2:error] [pid 21673:tid 21673] [client 159.89.200.103:57448] [client 159.89.200.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "20dekopas.com"] [uri "/prevlaravel/sftp-config.json"] [unique_id "ZuFqyg7iYZwBbIDN91or5AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-11 08:48:33 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 11 04:48:27.070222 2024] [security2:error] [pid 25432:tid 25432] [client 159.89.200.103:52178] [client 159.89.200.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1educare.gemexpressions.com"] [uri "/prevlaravel/sftp-config.json"] [unique_id "ZuFZW8Guhr-pzZH7NsaonwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-10 21:44:00 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 10 17:43:52.804846 2024] [security2:error] [pid 32000:tid 32000] [client 159.89.200.103:60955] [client 159.89.200.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnnyservices.com"] [uri "/portfolio/computertech/index.html/prevlaravel/sftp-config.json"] [unique_id "ZuC9mCkTB0PPD9xet-ElwgAAADE"], referer: http://computertechjohn.com/prevlaravel/sftp-config.json show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-10 20:34:11 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 10 16:34:04.855678 2024] [security2:error] [pid 691524:tid 691532] [client 159.89.200.103:55266] [client 159.89.200.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "citydentalclinic.com"] [uri "/sftp-config.json"] [unique_id "ZuCtPBSJxjuBKRmkQfRb4gAAAUY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-10 20:00:19 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 10 16:00:13.011404 2024] [security2:error] [pid 11747:tid 11747] [client 159.89.200.103:52004] [client 159.89.200.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaletparkaparts.com"] [uri "/prevlaravel/sftp-config.json"] [unique_id "ZuClTY98Dft4l9OFYwC4DAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 beehivesafety	2024-09-10 17:27:55 (1 year ago)	Threat Blocked by BeeHive from (ASN:14061) (Network:DIGITALOCEAN-ASN) (Host:beehive.systems) (Method ... show more Threat Blocked by BeeHive from (ASN:14061) (Network:DIGITALOCEAN-ASN) (Host:beehive.systems) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2024-09-10T17:27:55Z) show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2024-09-10 16:55:43 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 10 12:55:37.791734 2024] [security2:error] [pid 4953:tid 4953] [client 159.89.200.103:53705] [client 159.89.200.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azpinklimos.com"] [uri "/sftp-config.json"] [unique_id "ZuB6CZHPowq09tv6SnZ09gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2024-09-10 15:04:36 (1 year ago)	451 requests to */sftp-config.json	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2024-09-10 13:50:37 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 10 09:50:30.509334 2024] [security2:error] [pid 10427:tid 10427] [client 159.89.200.103:59018] [client 159.89.200.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3905ccn.us"] [uri "/sftp-config.json"] [unique_id "ZuBOpownrVokbf_uXFf6lQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-10 13:32:55 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.89.200.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 10 09:32:47.774252 2024] [security2:error] [pid 16489:tid 16489] [client 159.89.200.103:60538] [client 159.89.200.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "123clearmyticket.com"] [uri "/sftp-config.json"] [unique_id "ZuBKf8x7EpvH4qDQhgaEugAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-09-06 05:11:20 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-09-05 05:42:54 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
🇦🇺 advena	2024-09-05 04:45:55 (1 year ago)	159.89.200.103 (AS14061 DIGITALOCEAN-ASN) was intercepted at 2024-09-05T04:32:33Z after violating WA ... show more 159.89.200.103 (AS14061 DIGITALOCEAN-ASN) was intercepted at 2024-09-05T04:32:33Z after violating WAF directive: dd85fad4506443cd840737a22a7a7a26. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 202.91.40.136

🇬🇧 194.74.196.10

🇪🇸 80.102.218.207

🇲🇾 49.125.201.90

🇳🇱 45.148.10.157

🇮🇩 36.71.172.20

🇸🇦 2001:16a2:cd41:9500:78a4:685e:b299:99a6

🇵🇹 213.22.61.127

🇦🇺 203.185.198.246

🇺🇸 194.99.25.80

🇲🇽 187.148.214.132

🇱🇧 185.84.106.247

🇷🇺 178.46.137.215

🇲🇦 160.176.64.176

🇫🇷 152.228.135.83

🇮🇶 150.228.104.23

🇫🇮 147.185.133.62

🇲🇦 105.158.104.22

🇺🇸 104.252.191.110

🇹🇭 103.247.61.20