JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.223.80.165

159.223.80.165 was found in our database!

This IP was reported 1,201 times. Confidence of Abuse is 35%: ?

35%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.223.80.165

Whois 159.223.80.165

IP Abuse Reports for 159.223.80.165:

This IP address has been reported a total of 1,201 times from 359 distinct sources. 159.223.80.165 was first reported on December 2nd 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Scan	2026-05-07 01:54:34 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇧🇾 sashan	2026-05-06 14:37:03 (1 month ago)	2026-05-06T17:36:58.973187+03:00 gate kernel: nftables: JAIL-CWMP IN=wan OUT= MAC= SRC=159.223.80.16 ... show more 2026-05-06T17:36:58.973187+03:00 gate kernel: nftables: JAIL-CWMP IN=wan OUT= MAC= SRC=159.223.80.165 DST=xxx.xxx.xxx.xxx LEN=44 TOS=0x00 PREC=0x00 TTL=112 ID=44244 DF PROTO=TCP SPT=17229 DPT=7547 WINDOW=65280 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 gbzret4d	2026-04-28 06:39:38 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 11645 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 11645 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 11645 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-04-27 12:52:35 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 11343 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 11343 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 11343 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-04-27 06:34:35 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 11238 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 11238 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 11238 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-04-26 07:28:38 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 10888 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 10888 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 10888 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 2MP	2026-04-25 18:43:39 (1 month ago)	Honeypot [gcp-tpot]: HTTP/1.1 request on 4925 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64 ... show more Honeypot [gcp-tpot]: HTTP/1.1 request on 4925 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 4925 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇫🇮 nNordic	2026-04-25 08:41:40 (1 month ago)	Connection attempt blocked by IDS/IPS from 159.223.80.165/32	Hacking
🇺🇸 MPL	2026-04-25 07:40:48 (1 month ago)	tcp/1883 (2 or more attempts)	Port Scan
🇬🇧 gbzret4d	2026-04-24 18:39:35 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 10320 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 10320 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 10320 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 PeravixGroup	2026-04-24 09:48:21 (1 month ago)	HoneyPot hit - Aaran.cloud \| Mqtt Iot Probe \| iot exploitation \| MQTTxcan	IoT Targeted
🇬🇧 PeravixGroup	2026-04-24 09:30:29 (1 month ago)	HoneyPot hit - Aaran.cloud \| Web Scan \| web exploitation \| GET / HTTP/1.0 Host: 103.1.72.90 X-Real-I ... show more HoneyPot hit - Aaran.cloud \| Web Scan \| web exploitation \| GET / HTTP/1.0 Host: 103.1.72.90 X-Real-IP: 159.223.80.165 Connection: close Accept: / Accept-Lang show less	Web App Attack
🇬🇧 gbzret4d	2026-04-24 03:51:35 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 10077 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 10077 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 10077 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-04-23 05:52:03 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 9742 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0 ... show more Honeypot [uk-production01]: HTTP/1.1 request on 9742 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 9742 [1] TCP show less	Hacking Bad Web Bot
🇨🇳 pengpeng	2026-04-22 12:54:51 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 9677 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan

Showing 1 to 15 of 1201 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.241

🇨🇳 182.119.231.65

🇫🇷 91.196.152.107

🇺🇸 66.132.195.17

🇮🇩 210.79.142.221

🇨🇳 124.72.224.127

🇮🇳 122.187.224.173

🇵🇹 109.49.23.192

🇺🇸 2604:a880:400:d1:0:4:8bf4:7001

🇳🇱 185.223.235.58

🇻🇪 181.225.50.2

🇮🇳 145.223.17.242

🇮🇳 103.70.167.88

🇷🇴 92.118.39.236

🇳🇱 89.248.163.42

🇺🇸 66.132.224.16

🇫🇷 62.210.142.39

🇯🇵 8.211.162.225

🇷🇴 2.57.121.25

🇧🇷 205.210.31.209