JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.202.70

159.89.202.70 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 89%: ?

89%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.202.70

Whois 159.89.202.70

IP Abuse Reports for 159.89.202.70:

This IP address has been reported a total of 19 times from 17 distinct sources. 159.89.202.70 was first reported on June 25th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 littlebots	2026-06-29 19:34:22 (14 hours ago)	FortiGate IPS: 30 intrusion attempts detected. Attacks: PHPUnit.Eval-stdin.PHP.Remote.Code.Execution ... show more FortiGate IPS: 30 intrusion attempts detected. Attacks: PHPUnit.Eval-stdin.PHP.Remote.Code.Execution. Targeted 1 host(s) across 1 firewall(s). Severity: alert. Period: 6h. show less	Hacking
🇩🇪 dave	2026-06-29 11:52:31 (22 hours ago)	threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity ... show more threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/vpatch-env-access targets=lando hit_count=25 first_seen=2026-06-29T11:53:57Z last_seen=2026-06-29T11:52:31Z show less	Web App Attack
🇺🇸 Matthew Ping	2026-06-29 00:00:08 (1 day ago)	ModSecurity rule 949110 triggered on d865. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇩🇪 pscriptos	2026-06-28 22:38:22 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇳🇱 homeshowdomain.nl	2026-06-28 22:01:58 (1 day ago)	Auto-ban: >3000 req/min op 2026-06-28	Web App Attack SSH Hacking
🇺🇦 URAN Publishing Service	2026-06-28 13:08:31 (1 day ago)	159.89.202.70 - - [28/Jun/2026:16:08:16 +0300] "GET /.env HTTP/1.1" 404 773 "https://www.google.com/ ... show more 159.89.202.70 - - [28/Jun/2026:16:08:16 +0300] "GET /.env HTTP/1.1" 404 773 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 10.0; Macintosh; .NET CLR 2.3.25199; Intel Mac OS X 10_5_0)" 159.89.202.70 - - [28/Jun/2026:16:08:30 +0300] "GET //vendor/.env HTTP/1.1" 404 683 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 10.0; Macintosh; .NET CLR 2.3.25199; Intel Mac OS X 10_5_0)" ... show less	Web App Attack
🇬🇧 consul.to	2026-06-28 10:10:57 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 Lee Daniel	2026-06-28 09:54:55 (2 days ago)	159.89.202.70 - - [28/Jun/2026:05:54:54 -0400] "GET /.env HTTP/1.1" 403 4762 "https://www.google.com ... show more 159.89.202.70 - - [28/Jun/2026:05:54:54 -0400] "GET /.env HTTP/1.1" 403 4762 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 7.0; Macintosh; .NET CLR 2.5.5258; Intel Mac OS X 11_8_1)" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-28 04:05:37 (2 days ago)	Abuse Detected (2)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 02:45:48 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 159.89.202.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 159.89.202.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 22:45:44.047594 2026] [security2:error] [pid 31870:tid 31913] [client 159.89.202.70:47952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ecocentri.city"] [uri "/.env"] [unique_id "akCK2GD7WtZpNzuWPTmj1AAAAQs"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-28 01:22:30 (2 days ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Mangelot Hosting	2026-06-27 18:06:46 (2 days ago)	(modsecurity) srv104 ModSecurity 159.89.202.70 (SG/Singapore/-): 10 in the last 3600 secs; Ports: ; ... show more (modsecurity) srv104 ModSecurity 159.89.202.70 (SG/Singapore/-): 10 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 Mangelot Hosting	2026-06-27 15:41:58 (2 days ago)	(modsecurity) srv103 ModSecurity 159.89.202.70 (SG/Singapore/-): 10 in the last 3600 secs; Ports: ; ... show more (modsecurity) srv103 ModSecurity 159.89.202.70 (SG/Singapore/-): 10 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-06-27 15:40:16 (2 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 22:48:36 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 159.89.202.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 159.89.202.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 18:48:32.173691 2026] [security2:error] [pid 14738:tid 14738] [client 159.89.202.70:39700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aseguratuauto.com"] [uri "/.git/config"] [unique_id "aj8BwElftRsbWxP9zt0aWgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 194.163.185.4

🇳🇱 185.93.89.79

🇳🇱 175.110.112.8

🇺🇸 136.107.115.92

🇸🇬 101.47.15.119

🇵🇱 34.118.30.11

🇮🇳 2409:40c1:5503:bd8c:382c:f8f2:57eb:3d62

🇷🇺 128.0.140.191

🇮🇳 122.183.45.190

🇳🇱 91.92.40.176

🇮🇹 81.56.73.33

🇲🇩 80.97.160.9

🇺🇸 69.164.214.243

🇧🇷 187.45.95.66

🇸🇪 171.25.158.58

🇹🇼 130.211.253.85

🇦🇪 95.182.93.67

🇮🇳 34.93.103.22

🇳🇱 5.187.35.142

🇮🇳 223.236.96.140