JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.97.12

159.89.97.12 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.97.12

Whois 159.89.97.12

IP Abuse Reports for 159.89.97.12:

This IP address has been reported a total of 192 times from 29 distinct sources. 159.89.97.12 was first reported on February 17th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 _ArminS_	2025-12-23 15:04:24 (8 months ago)	SP-Scan 61011:1000 detected 2025.12.23 16:04:24 blocked until 2026.02.11 09:07:11	Port Scan
🇺🇸 xmission.com	2025-12-23 14:50:51 (8 months ago)	Blocked by UFW (TCP on 9000) Source port: 61001 TTL: 236 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9000) Source port: 61001 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 159.89.97.12) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-11-24 11:26:42 (9 months ago)	[23/Nov/2025:10:22:53 -0500] "GET / HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (K ... show more [23/Nov/2025:10:22:53 -0500] "GET / HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" show less	Hacking
🇺🇸 MPL	2025-11-23 15:40:30 (9 months ago)	tcp/8883 (2 or more attempts)	Port Scan
🇺🇸 MPL	2025-11-23 15:40:30 (9 months ago)	tcp/8883	Port Scan
🇳🇱 trivox.sh	2025-06-02 13:21:52 (1 year ago)	2025-06-02T13:13:35.676109+00:00 ws1.trivox.sh sshd[1592379]: Connection closed by authenticating us ... show more 2025-06-02T13:13:35.676109+00:00 ws1.trivox.sh sshd[1592379]: Connection closed by authenticating user root 159.89.97.12 port 35938 [preauth] 2025-06-02T13:21:48.800467+00:00 ws1.trivox.sh sshd[1593373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.12 user=root 2025-06-02T13:21:51.379850+00:00 ws1.trivox.sh sshd[1593373]: Failed password for root from 159.89.97.12 port 42198 ssh2 2025-06-02T13:21:52.093749+00:00 ws1.trivox.sh sshd[1593373]: Connection closed by authenticating user root 159.89.97.12 port 42198 [preauth] ... show less	Brute-Force SSH
🇬🇧 Heathrxw	2025-06-02 13:20:40 (1 year ago)	Jun 2 14:20:37 s1-jellyfish sshd[1934945]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more Jun 2 14:20:37 s1-jellyfish sshd[1934945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.12 user=root Jun 2 14:20:39 s1-jellyfish sshd[1934945]: Failed password for root from 159.89.97.12 port 58162 ssh2 ... show less	Brute-Force SSH
🇬🇧 Heathrxw	2025-06-02 12:14:16 (1 year ago)	Jun 2 13:14:13 s1-jellyfish sshd[1272064]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more Jun 2 13:14:13 s1-jellyfish sshd[1272064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.12 user=root Jun 2 13:14:15 s1-jellyfish sshd[1272064]: Failed password for root from 159.89.97.12 port 52064 ssh2 ... show less	Brute-Force SSH
🇳🇱 trivox.sh	2025-06-02 12:07:08 (1 year ago)	2025-06-02T11:58:48.124233+00:00 ws1.trivox.sh sshd[1582065]: Connection closed by authenticating us ... show more 2025-06-02T11:58:48.124233+00:00 ws1.trivox.sh sshd[1582065]: Connection closed by authenticating user root 159.89.97.12 port 47478 [preauth] 2025-06-02T12:07:04.908775+00:00 ws1.trivox.sh sshd[1583069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.12 user=root 2025-06-02T12:07:06.911799+00:00 ws1.trivox.sh sshd[1583069]: Failed password for root from 159.89.97.12 port 60970 ssh2 2025-06-02T12:07:08.198704+00:00 ws1.trivox.sh sshd[1583069]: Connection closed by authenticating user root 159.89.97.12 port 60970 [preauth] ... show less	Brute-Force SSH
🇬🇧 Heathrxw	2025-06-02 11:07:48 (1 year ago)	Jun 2 12:07:45 s1-jellyfish sshd[606880]: pam_unix(sshd:auth): authentication failure; logname= uid ... show more Jun 2 12:07:45 s1-jellyfish sshd[606880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.12 user=root Jun 2 12:07:47 s1-jellyfish sshd[606880]: Failed password for root from 159.89.97.12 port 34184 ssh2 ... show less	Brute-Force SSH
🇳🇱 trivox.sh	2025-06-02 10:52:28 (1 year ago)	2025-06-02T10:44:14.710298+00:00 ws1.trivox.sh sshd[1573800]: Connection closed by authenticating us ... show more 2025-06-02T10:44:14.710298+00:00 ws1.trivox.sh sshd[1573800]: Connection closed by authenticating user root 159.89.97.12 port 58300 [preauth] 2025-06-02T10:52:24.564024+00:00 ws1.trivox.sh sshd[1574718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.12 user=root 2025-06-02T10:52:26.542310+00:00 ws1.trivox.sh sshd[1574718]: Failed password for root from 159.89.97.12 port 37426 ssh2 2025-06-02T10:52:27.859017+00:00 ws1.trivox.sh sshd[1574718]: Connection closed by authenticating user root 159.89.97.12 port 37426 [preauth] ... show less	Brute-Force SSH
🇬🇧 Heathrxw	2025-06-02 10:01:28 (1 year ago)	Jun 2 11:01:25 s1-jellyfish sshd[4138308]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more Jun 2 11:01:25 s1-jellyfish sshd[4138308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.12 user=root Jun 2 11:01:27 s1-jellyfish sshd[4138308]: Failed password for root from 159.89.97.12 port 52140 ssh2 ... show less	Brute-Force SSH
🇳🇱 trivox.sh	2025-06-02 09:37:51 (1 year ago)	2025-06-02T09:29:32.448105+00:00 ws1.trivox.sh sshd[1565206]: Connection closed by authenticating us ... show more 2025-06-02T09:29:32.448105+00:00 ws1.trivox.sh sshd[1565206]: Connection closed by authenticating user root 159.89.97.12 port 37262 [preauth] 2025-06-02T09:37:47.550985+00:00 ws1.trivox.sh sshd[1566262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.12 user=root 2025-06-02T09:37:49.580240+00:00 ws1.trivox.sh sshd[1566262]: Failed password for root from 159.89.97.12 port 37786 ssh2 2025-06-02T09:37:50.840562+00:00 ws1.trivox.sh sshd[1566262]: Connection closed by authenticating user root 159.89.97.12 port 37786 [preauth] ... show less	Brute-Force SSH
🇬🇧 Heathrxw	2025-06-02 08:55:09 (1 year ago)	Jun 2 09:55:06 s1-jellyfish sshd[3474365]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more Jun 2 09:55:06 s1-jellyfish sshd[3474365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.12 user=root Jun 2 09:55:08 s1-jellyfish sshd[3474365]: Failed password for root from 159.89.97.12 port 37946 ssh2 ... show less	Brute-Force SSH
🇰🇷 Woodie	2025-06-02 08:39:10 (1 year ago)	2025-06-02T04:31:11.009029-04:00 debian sshd[1556708]: Failed password for root from 159.89.97.12 po ... show more 2025-06-02T04:31:11.009029-04:00 debian sshd[1556708]: Failed password for root from 159.89.97.12 port 50132 ssh2 2025-06-02T04:37:46.114314-04:00 debian sshd[1562597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.12 user=root 2025-06-02T04:37:48.123740-04:00 debian sshd[1562597]: Failed password for root from 159.89.97.12 port 39696 ssh2 2025-06-02T04:39:08.258901-04:00 debian sshd[1563836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.97.12 user=root 2025-06-02T04:39:09.855791-04:00 debian sshd[1563836]: Failed password for root from 159.89.97.12 port 49536 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 192 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.166

🇺🇸 137.184.208.127

🇺🇸 66.132.224.89

🇳🇱 45.148.10.40

🇳🇱 185.136.15.90

🇺🇸 170.106.15.3

🇵🇰 110.38.3.62

🇮🇩 43.245.248.2

🇰🇷 219.251.24.135

🇺🇸 216.73.217.22

🇳🇱 195.178.110.137

🇨🇮 160.155.16.199

🇨🇳 112.94.253.248

🇮🇪 108.130.55.91

🇬🇧 45.133.173.141

🇲🇽 201.175.107.78

🇪🇬 156.197.210.170

🇫🇷 91.231.89.7

🇬🇧 74.125.40.151

🇺🇸 73.167.237.157