159.89.42.101
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Clifton, New Jersey
No reports in the last 60 days
159.89.42.101 has been reported 89 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
89 from
66 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇸🇬 webnestify |
[Webnestify Honeypot - Singapore] Unauthorized connection attempt on port 6000.
|
Port Scan Hacking Brute-Force | |
| 🇵🇱 sledzik1984 |
Honeypot hit: Unauthorized traffic (517 bytes of payload); 8883 [1] TCP
|
Port Scan | |
| 🇩🇪 HandyTreff.de |
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -42.587 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.3
|
Bad Web Bot Web App Attack | |
| 🇩🇪 kranem |
|
Bad Web Bot | |
| 🇺🇸 Major Hostility |
"GET /.git/config HTTP/1.1" 404
"GET /.git/config HTTP/1.1" 404
|
Web App Attack | |
| 🇨🇿 ddw |
ModSecurity detection - Rules: 930130(Restricted File Access Attempt)
|
Web App Attack | |
| Anonymous |
159.89.42.101 - - [15/Dec/2025:21:10:41 +0100] "GET /.git/config HTTP/1.1" 404 538 "-" "Opera/9.80 (Windows NT 5.1; U; zh-tw) Presto/2.8.131 Version/11.10"
|
Hacking Brute-Force Web App Attack | |
| Anonymous |
Unauthorized SSH login attempts
|
Brute-Force SSH | |
| 🇪🇸 masterguru |
Restricted File Access Attempt. Matched phrase "/.git/" at REQUEST_FILENAME. (930130-122)
|
Hacking Web App Attack | |
| 🇺🇸 Starburst SysOp Team |
(mod_security-custom) mod_security (id:210492) triggered by 159.89.42.101 (US/United States/New Jersey/Clifton/-/[AS14061 DIGITALOCEAN-ASN]): 1 in the last 3600 secs (0-srv1)
|
Hacking | |
| 🇬🇧 Aetherweb Ark |
(mod_security) mod_security (id:949110) triggered by 159.89.42.101 (US/United States/-): N in the last X secs
|
Web App Attack | |
| Anonymous |
159.89.42.101 - - [15/Dec/2025:19:27:41 +0000] "GET /.git/config HTTP/1.1" 302 3367 "-" "Mozilla/5.0 (iPad; U; CPU iPad OS 5_0_1 like Mac OS X; en-us) AppleWebKit/535.1+ (KHTML like Gecko) Version/7.2.0.0 Safari/6533.18.5"
...
|
Bad Web Bot Web App Attack | |
| 🇳🇿 Antinson |
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
|
Bad Web Bot | |
| 🇩🇪 Mr-Money |
scenario: crowdsecurity/modsecurity - events: 1 - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config
|
Web App Attack | |
| 🇩🇪 kranem |
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown