JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.23.112

159.89.23.112 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 60%: ?

60%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.23.112

Whois 159.89.23.112

IP Abuse Reports for 159.89.23.112:

This IP address has been reported a total of 21 times from 17 distinct sources. 159.89.23.112 was first reported on October 26th 2025, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 celestialcity	2026-06-29 07:40:17 (20 hours ago)	Blocked by UFW on celestialcityas [12222/tcp] \| SPT: 57253 \| TTL: 235 \| LEN: 40 \| TOS: 0x00 • Report ... show more Blocked by UFW on celestialcityas [12222/tcp] \| SPT: 57253 \| TTL: 235 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 pengpeng	2026-06-29 07:17:20 (20 hours ago)	monitor: on ser162528253480 \| port: 12222 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 12222 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Blinker73	2026-06-29 03:37:09 (1 day ago)	2026-06-28T16:38 kernel: OUT= SRC=159.89.23.112 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=44260 PRO ... show more 2026-06-28T16:38 kernel: OUT= SRC=159.89.23.112 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=44260 PROTO=TCP SPT=58621 DPT=15207 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-28T18:45 kernel: OUT= SRC=159.89.23.112 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=55280 PROTO=TCP SPT=45457 DPT=9445 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-28T20:02 kernel: OUT= SRC=159.89.23.112 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=62901 PROTO=TCP SPT=50949 DPT=15877 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇭🇰 pengpeng	2026-06-29 03:27:24 (1 day ago)	monitor: on ser162528253480 \| port: 13961 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 13961 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇪 donarev419	2026-06-29 00:43:06 (1 day ago)	Connection to port 15877 with data transfer. Data preview:	Port Scan Hacking
🇨🇦 celestialcity	2026-06-29 00:21:52 (1 day ago)	Blocked by UFW on celestialcityna [15877/tcp] \| SPT: 50949 \| TTL: 236 \| LEN: 40 \| TOS: 0x00 • Report ... show more Blocked by UFW on celestialcityna [15877/tcp] \| SPT: 50949 \| TTL: 236 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Tanados	2026-06-28 21:05:20 (1 day ago)	Blocked by UFW [15207/tcp] Source port: 58621 TTL: 239 Packet length: 40 TOS: 0x00 This report was ... show more Blocked by UFW [15207/tcp] Source port: 58621 TTL: 239 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 evvsk	2026-06-28 21:02:17 (1 day ago)	15207/tcp	Port Scan
Anonymous	2026-06-28 20:56:08 (1 day ago)	2026-06-28T21:56:07.471369+01:00 vps kernel: [44420309.429055] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-28T21:56:07.471369+01:00 vps kernel: [44420309.429055] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=159.89.23.112 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=49625 PROTO=TCP SPT=58621 DPT=15207 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇬🇧 sonot	2026-06-28 20:50:51 (1 day ago)	Blocked by UFW on tunneluk01 [15207/tcp] \| SPT: 58621 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by ... show more Blocked by UFW on tunneluk01 [15207/tcp] \| SPT: 58621 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-28 20:38:27 (1 day ago)	Blocked by UFW on LAXHH [15207/tcp] \| SPT: 58621 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [15207/tcp] \| SPT: 58621 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 masterguru	2026-03-03 07:23:09 (3 months ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)	Web App Attack
🇿🇦 rockethost	2026-02-16 07:30:00 (4 months ago)		DDoS Attack Brute-Force
🇪🇹 aorth	2026-02-15 10:24:46 (4 months ago)	Feb 15 13:24:46 Invalid user 1 from 159.89.23.112 port 40708	Brute-Force SSH
🇨🇦 hpg	2026-02-14 14:29:02 (4 months ago)	87 invalid SSH login attempts from 159.89.23.112 in the last 0 hours	Brute-Force SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 87.251.64.156

🇺🇸 207.244.202.236

🇨🇴 206.62.136.130

🇳🇱 195.178.110.242

🇸🇬 178.128.25.70

🇨🇳 120.48.175.122

🇺🇸 107.174.137.235

🇸🇪 104.23.221.58

🇳🇱 88.151.33.203

🇨🇳 58.218.178.134

🇪🇨 38.51.35.239

🇺🇸 23.92.27.206

🇨🇳 223.64.222.37

🇬🇧 193.163.125.69

🇲🇽 187.190.35.163

🇬🇧 185.216.145.190

🇳🇱 185.100.232.75

🇨🇳 183.218.169.153

🇮🇩 180.244.38.15

🇳🇱 172.94.9.55