JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.11.16

159.65.11.16 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 80%: ?

80%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.65.11.16

Whois 159.65.11.16

IP Abuse Reports for 159.65.11.16:

This IP address has been reported a total of 18 times from 16 distinct sources. 159.65.11.16 was first reported on May 22nd 2024, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-27 04:21:24 (16 hours ago)	[ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <nam ... show more [ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 159.65.11.16 - - \[21/Oct/2026:19:24:37 +0200\] "HEAD /site1/ HTTP/1.1" 404 5635 "https://modumgroup.com/site1/" "Mozilla/5.0 \(Linux\; Android 13\; Pixel 7a\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/124.0.6367.82 Mobile Safari/537.36" 159.65.11.16 - - \[21/Oct/2026:19:24:39 +0200\] "HEAD /store/ HTTP/1.1" 404 328 "https://modumgroup.com/store/" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 15_0\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/125.0.6422.141 Safari/537.36" 159.65.11.16 - - \[21/Oct/2026:19:24:40 +0200\] "HEAD /v2/ HTTP/1.1" 404 328 "https://modumgroup.com/v2/" "Mozilla/5.0 \(Windows NT 11.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" modumgroup.c ... show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-25 13:42:50 (2 days ago)	[ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <nam ... show more [ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 159.65.11.16 - - \[21/Oct/2026:19:24:37 +0200\] "HEAD /site1/ HTTP/1.1" 404 5635 "https://modumgroup.com/site1/" "Mozilla/5.0 \(Linux\; Android 13\; Pixel 7a\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/124.0.6367.82 Mobile Safari/537.36" 159.65.11.16 - - \[21/Oct/2026:19:24:39 +0200\] "HEAD /store/ HTTP/1.1" 404 328 "https://modumgroup.com/store/" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 15_0\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/125.0.6422.141 Safari/537.36" 159.65.11.16 - - \[21/Oct/2026:19:24:40 +0200\] "HEAD /v2/ HTTP/1.1" 404 328 "https://modumgroup.com/v2/" "Mozilla/5.0 \(Windows NT 11.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" modumgroup.c ... show less	Bad Web Bot Web App Attack
🇩🇪 MarkGGN	2026-10-21 22:05:57 (5 days ago)	Web attack. 159.65.11.16 - - [22/Oct/2026:00:05:56 +0200] "HEAD /store/ HTTP/2.0" 404 0 "http://mk.c ... show more Web attack. 159.65.11.16 - - [22/Oct/2026:00:05:56 +0200] "HEAD /store/ HTTP/2.0" 404 0 "http://mk.cx/store/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 159.65.11.16 - - [22/Oct/2026:00:05:56 +0200] "HEAD /v2/ HTTP/2.0" 404 0 "http://mk.cx/v2/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" show less	Web App Attack
🇳🇱 e.fierstra	2026-10-21 21:37:20 (5 days ago)	excessive HTTP 404 errors	Bad Web Bot
Anonymous	2026-10-21 21:05:18 (5 days ago)	Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=29	Hacking
🇵🇱 gandaflux	2026-10-21 21:05:16 (5 days ago)	159.65.11.16 [redacted-domain] - [21/Oct/2026:23:05:06 +0200] "HEAD /site1/ HTTP/2.0" 404 0 "[redact ... show more 159.65.11.16 [redacted-domain] - [21/Oct/2026:23:05:06 +0200] "HEAD /site1/ HTTP/2.0" 404 0 "[redacted-url]/site1/" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 159.65.11.16 [redacted-domain] - [21/Oct/2026:23:05:07 +0200] "HEAD /store/ HTTP/2.0" 404 0 "[redacted-url]/store/" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 159.65.11.16 [redacted-domain] - [21/Oct/2026:23:05:07 +0200] "HEAD /v2/ HTTP/2.0" 404 0 "[redacted-url]/v2/" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 159.65.11.16 [redacted-domain] - [21/Oct/2026:23:05:08 +0200] "HEAD /2024/ HTTP/2.0" 404 0 "[redacted-url]/2024/" "Mozilla/ show less	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-10-21 20:48:49 (5 days ago)	Try to access /wp/	Web App Attack
🇩🇪 bazter.pro	2026-10-21 19:34:18 (6 days ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-21 19:33:34 (6 days ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 159.65.11.16 (SG/Singapore/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 159.65.11.16 (SG/Singapore/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 filstal.org	2026-10-21 18:41:03 (6 days ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36 show less	Bad Web Bot
🇺🇸 mnsf	2026-10-21 18:05:29 (6 days ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇨🇭 Origon	2026-10-21 17:58:56 (6 days ago)	http-probing - IP: 159.65.11.16 - time="2026-10-21T19:58:56+02:00" level=info msg="(555f66b4f6a7455 ... show more http-probing - IP: 159.65.11.16 - time="2026-10-21T19:58:56+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 159.65.11.16 (SG/14061) : 4h ban on Ip 159.65.11.16" module=db show less	Web App Attack
🇸🇪 Minglarn	2026-10-21 17:29:23 (6 days ago)	Malicious crawler, scraper or bad bot detected. (3 hits). Log: 159.65.11.16 - - [21/Oct/2026:17:29:2 ... show more Malicious crawler, scraper or bad bot detected. (3 hits). Log: 159.65.11.16 - - [21/Oct/2026:17:29:22 +0000] "HEAD /site1/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 159.65.11.16 - - [21/Oct/2026:17:29:22 +0000] "HEAD /store/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 159.65.11.16 - - [21/Oct/2026:17:29:23 +0000] "HEAD /v2/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" show less	Bad Web Bot
🇺🇸 ambor	2026-10-21 17:27:58 (6 days ago)	Honeypot access: WordPress installation path scan. Path: /wordpress/	Brute-Force Web App Attack
Anonymous	2026-10-21 17:26:02 (6 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 165.22.19.111

🇸🇬 150.109.16.200

🇮🇳 103.60.211.244

🇺🇸 47.89.230.8

🇫🇷 217.60.184.2

🇺🇸 212.119.47.27

🇧🇷 187.58.241.90

🇳🇱 185.14.30.133

🇵🇰 182.188.24.243

🇺🇸 162.216.150.115

🇮🇳 159.65.149.131

🇺🇸 144.172.105.154

🇺🇸 93.152.85.2

🇷🇴 92.118.39.14

🇺🇦 91.231.41.119

🇨🇳 47.121.131.108

🇺🇸 45.146.55.227

🇩🇪 18.185.135.112

🇦🇺 3.26.153.167

🇮🇩 202.145.0.18