JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.65.136.248

Activity Trending Down

Abuse Confidence Score

100% Critical

142 reports

97 reporters · latest 4 weeks ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

142 from 97 distinct reporters

First reported

June 14th 2024

Most recent report

4 weeks ago

Last 60 days

Top reporter locations 🇩🇪 Germany 28 🇵🇱 Poland 15 🇫🇷 France 13

Most common categories Web App Attack 79 Bad Web Bot 46 Hacking 32 Brute-Force 29 Port Scan 9

Old reports The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-10-02 04:35:26 (4 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sweetpuddingtrap.online \| URI: //images/images ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sweetpuddingtrap.online \| URI: //images/images/cache.php \| UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 Charlesiv	2026-10-02 04:00:19 (4 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK ASN: 14061 (DigitalOcean, LLC) Protocol: HTTP/1.1 (GET method) Endpoint: //cache/cache/cache.php Timestamp: 2026-10-02T02:14:27Z Ray ID: a4403197f863f924 UA: Mozlila/5.0 (Linux; A ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK ASN: 14061 (DigitalOcean, LLC) Protocol: HTTP/1.1 (GET method) Endpoint: //cache/cache/cache.php Timestamp: 2026-10-02T02:14:27Z Ray ID: a4403197f863f924 UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 show less	Bad Web Bot
Anonymous	2026-10-02 03:01:02 (4 weeks ago)	...	Web App Attack
🇩🇪 Philister11	2026-10-02 01:45:09 (4 weeks ago)	CrowdSec: crowdsecurity/http-bad-user-agent (SG/AS14061)	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-02 00:28:30 (4 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.online \| URI: //images/images/cache.p ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.online \| URI: //images/images/cache.php \| UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇦🇺 nzhost.co.nz	2026-10-02 00:18:27 (4 weeks ago)	$f2bV_matches	Hacking Brute-Force
🇩🇪 BlueWire Hosting	2026-10-02 00:03:37 (4 weeks ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇫🇷 largo-it.net	2026-10-01 23:14:29 (4 weeks ago)	[02/Oct/2026:01:11:59.734] HTTP 404 - GET //images/images/cache.php [02/Oct/2026:01:12:36.922] HTTP 404 - GET //images/images/images/images/images/images/images/images/cache.php [02/Oct/2026:01:12:53.606] HTTP 404 - GET //images/images/images/images/ ... show more [02/Oct/2026:01:11:59.734] HTTP 404 - GET //images/images/cache.php [02/Oct/2026:01:12:36.922] HTTP 404 - GET //images/images/images/images/images/images/images/images/cache.php [02/Oct/2026:01:12:53.606] HTTP 404 - GET //images/images/images/images/images/images/images/cache.php [02/Oct/2026:01:13:13.636] HTTP 404 - GET //images/images/images/images/images/images/cache.php [02/Oct/2026:01:13:32.323] HTTP 404 - GET //images/images/images/images/images/cache.php [02/Oct/2026:01:14:02.087] HTTP 404 - GET //images/images/images/images/cache.php [02/Oct/2026:01:14:19.992] HTTP 404 - GET //images/images/images/cache.php [02/Oct/2026:01:14:28.454] HTTP 404 - GET //wp-content/plugins/plugins/cache.php show less	Hacking Bad Web Bot Web App Attack
🇩🇪 itsolon	2026-10-01 22:24:03 (4 weeks ago)	[02/Oct/2026:00:21:48 +0200] 179089330866.625848 159.65.136.248 0 217.154.7.177 443 [02/Oct/2026:00:22:15 +0200] 179089333511.565604 159.65.136.248 0 217.154.7.177 443 [02/Oct/2026:00:22:53 +0200] 179089337379.305461 159.65.136.248 0 217.154.7.177 44 ... show more [02/Oct/2026:00:21:48 +0200] 179089330866.625848 159.65.136.248 0 217.154.7.177 443 [02/Oct/2026:00:22:15 +0200] 179089333511.565604 159.65.136.248 0 217.154.7.177 443 [02/Oct/2026:00:22:53 +0200] 179089337379.305461 159.65.136.248 0 217.154.7.177 443 [02/Oct/2026:00:23:26 +0200] 179089340689.202515 159.65.136.248 0 217.154.7.177 443 [02/Oct/2026:00:24:03 +0200] 179089344334.781565 159.65.136.248 0 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇩🇪 Jarda_H	2026-10-01 22:10:40 (4 weeks ago)	http-bad-user-agent	Web App Attack
🇳🇱 e.fierstra	2026-10-01 20:38:32 (4 weeks ago)	excessive HTTP 404 errors	Bad Web Bot
🇵🇱 lns.bz	2026-10-01 20:15:15 (4 weeks ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 masterguru	2026-10-01 19:13:36 (4 weeks ago)	BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-195)	Bad Web Bot
🇵🇱 Budyn	2026-10-01 18:59:27 (4 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: goblinpot.store \| URI: //images/images/cache.p ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: goblinpot.store \| URI: //images/images/cache.php \| UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇧🇷 maviei	2026-10-01 16:45:56 (4 weeks ago)	prolcasulo.com.br 159.65.136.248 - - [01/Oct/2026:13:45:54 -0300] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Versi ... show more prolcasulo.com.br 159.65.136.248 - - [01/Oct/2026:13:45:54 -0300] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 142 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇳 2402:800:63af:d1b2:85ea:3308:7d8e:167d

🇰🇷 220.76.220.247

🇰🇷 211.253.31.30

🇳🇱 200.138.46.86

🇨🇴 191.104.74.32

🇺🇦 188.239.82.115

🇩🇴 152.0.64.40

🇺🇸 137.184.32.56

🇨🇳 119.48.22.254

🇮🇩 103.159.199.43

🇸🇮 102.220.161.174

🇨🇳 101.126.4.240

🇧🇷 45.225.235.1

🇧🇪 35.210.178.145

🇧🇪 35.206.135.14

🇵🇱 212.14.51.149

🇬🇹 200.94.250.142

🇲🇽 189.253.21.69

🇳🇱 188.166.99.230

🇵🇪 179.6.169.20