JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.202.180

159.89.202.180 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 87%: ?

87%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.202.180

Whois 159.89.202.180

IP Abuse Reports for 159.89.202.180:

This IP address has been reported a total of 56 times from 35 distinct sources. 159.89.202.180 was first reported on June 6th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 RoboSOC	2026-07-23 19:40:20 (19 hours ago)	Joomla SP Page Builder Unauthenticated File Upload Remote Code Execution Vulnerability, PTR: PTR rec ... show more Joomla SP Page Builder Unauthenticated File Upload Remote Code Execution Vulnerability, PTR: PTR record not found show less	Hacking
Anonymous	2026-07-23 13:19:49 (1 day ago)	159.89.202.180 - - [23/Jul/2026:15:19:48 +0200] "POST /index.php?option=com_sppagebuilder&task=asset ... show more 159.89.202.180 - - [23/Jul/2026:15:19:48 +0200] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 dynamix	2026-07-22 12:46:14 (2 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 lavnet.net	2026-07-19 05:18:29 (5 days ago)	159.89.202.180 - - [19/Jul/2026:05:18:27 +0000] "GET /index.php?option=com_sppagebuilder&task=asset. ... show more 159.89.202.180 - - [19/Jul/2026:05:18:27 +0000] "GET /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 6132 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 159.89.202.180 - - [19/Jul/2026:05:18:27 +0000] "GET /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 159.89.202.180 - - [19/Jul/2026:05:18:28 +0000] "GET /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 159.89.202.180 - - [19/Jul/2026:05:18:28 +0000] "GET /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 ... show less	Brute-Force
🇺🇸 convos	2026-07-17 18:37:11 (6 days ago)	Auto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and atta ... show more Auto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and attack probes. Requests blocked (403). show less	Web App Attack Hacking Bad Web Bot
Anonymous	2026-07-17 13:20:14 (1 week ago)	$f2bV_matches	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-14 18:16:55 (1 week ago)	Multiple WAF Violations	Web App Attack
🇮🇪 Jim Keir	2026-07-13 08:12:08 (1 week ago)	2026-07-13 08:12:07 159.89.202.180 File scanning, blocking 159.89.202.180 for 5 minutes	Web App Attack
🇧🇷 dominioz	2026-07-10 15:50:46 (1 week ago)	2026-07-10 15:49:58 GET /phpgraphy/index.php dir=Fotos%20Alexandre - 159.89.202.180 HTTP/1.1 Mozilla ... show more 2026-07-10 15:49:58 GET /phpgraphy/index.php dir=Fotos%20Alexandre - 159.89.202.180 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:122.0)+Gecko/20100101+Firefox/122.0 - 404 1987 2026-07-10 15:50:09 GET /plugins/editors/jce/jce.xml - - 159.89.202.180 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+13_4)+AppleWebKit/605.1.15+Safari/605.1.15 - 404 1987 2026-07-10 15:50:10 GET /plugins/system/jcemediabox/js/jcemediabox.js - - 159.89.202.180 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+13_4)+AppleWebKit/605.1.15+Safari/605.1.15 - 404 1987 2026-07-10 15:50:10 GET /plugins/system/jce/css/content.css - - 159.89.202.180 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+13_4)+AppleWebKit/605.1.15+Safari/605.1.15 - 404 1987 ... show less	Web App Attack
🇫🇷 SpaceHost-Server	2026-07-07 22:29:22 (2 weeks ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-06 22:27:40 (2 weeks ago)		Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-07-05 14:51:21 (2 weeks ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇫🇷 SpaceHost-Server	2026-07-04 22:28:00 (2 weeks ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-03 22:27:56 (2 weeks ago)		Brute-Force Web App Attack
Anonymous	2026-07-03 19:17:02 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 142.93.55.59

🇳🇱 45.148.10.147

🇮🇳 42.107.78.30

🇻🇳 14.191.117.87

🇳🇱 193.176.31.201

🇫🇮 147.185.133.59

🇺🇸 136.0.117.83

🇧🇷 104.28.254.133

🇷🇴 92.118.39.203

🇺🇸 195.184.76.168

🇳🇱 195.178.110.227

🇬🇧 193.163.125.208

🇨🇴 190.90.37.98

🇮🇹 172.213.225.181

🇺🇸 172.202.26.222

🇺🇸 162.216.150.191

🇺🇸 136.0.117.82

🇧🇷 104.28.222.134

🇧🇷 104.28.222.133

🇸🇬 103.187.147.71