159.89.115.143

Classification: Malicious

159.89.115.143 is a malicious IP address in Toronto, CA. 127 sightings from 7 threat sources (Port Scanner, Malicious Host), last seen 2026-11-04.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
HTTP Attacker Blocklist.de 2024-08-09 02:23:44 2026-11-04 07:00:18 attacker malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2026-05-29 01:19:17 2026-06-01 01:36:58 malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2026-05-29 01:19:19 2026-05-31 01:20:36 malicious-activity
Suspicious Host AbuseIPDB 2025-04-26 02:20:54 2026-05-28 05:18:47 anomalous-activity
Malicious Host CIArmy 2024-08-09 12:21:35 2026-05-25 15:02:00 malicious-activity
Malicious Host HoneyDB 2025-11-09 00:00:00 2025-11-09 00:00:00 malicious-activity
VPN IPWhois.io 2025-06-15 06:40:13 2025-06-15 06:40:13 anonymization
Malicious Host AbuseIPDB 2024-08-09 22:08:12 2025-05-09 19:35:13 compromised malicious-activity
Proxy IPWhois.io 2025-04-26 10:06:26 2025-05-08 23:44:41 anonymization
Port Scanner AbuseIPDB 2025-04-25 07:21:06 2025-05-05 01:36:00 anomalous-activity
Hacking AbuseIPDB 2025-04-29 13:09:27 2025-05-04 19:34:11 malicious-activity
SSH Attacker AbuseIPDB 2025-05-04 15:53:52 2025-05-04 15:53:52 malicious-activity
Bruteforce AbuseIPDB 2025-04-26 00:06:57 2025-05-04 15:53:52 malicious-activity
HTTP Attacker AbuseIPDB 2025-04-25 22:23:05 2025-05-03 04:09:51 malicious-activity
HTTP Spammer StopForumSpam.com 2018-04-07 22:48:45 2018-04-07 22:48:45

Tags

bot abuse apache ddos rfi attacker

Whois information

AS name
AS14061 Digitalocean, LLC
AS registry
arin
AS date
2017-07-07 00:00:00
AS CIDR
159.89.112.0/20
CIDR
159.89.0.0/16
Registrant
Digitalocean, LLC
Address
101 Ave of the Americas 10th Floor
City
Toronto
State
NY
Postal code
M5H 2N2
Country
CA — Canada 🇨🇦
Contact email
[email protected], [email protected]
First indexed
2018-04-07 22:48:45
Last updated
2026-11-04 07:00:18

Malicious IPs in the same CIDR

159.89.126.159 159.89.124.118 159.89.125.44 159.89.116.219 159.89.125.248 159.89.116.189 159.89.124.112 159.89.123.203 159.89.125.145 159.89.117.21 159.89.114.95 159.89.117.170 159.89.118.173 159.89.119.139 159.89.121.75 159.89.118.21 159.89.117.122 159.89.116.42 159.89.116.120 159.89.117.68 159.89.127.165 159.89.115.143 159.89.113.99 159.89.120.168 159.89.118.214