JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.111.3

159.65.111.3 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 68%: ?

68%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	prod-xenon-sfo2-29.do.binaryedge.ninja
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.65.111.3

Whois 159.65.111.3

IP Abuse Reports for 159.65.111.3:

This IP address has been reported a total of 18 times from 12 distinct sources. 159.65.111.3 was first reported on July 3rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Honeypot-EU-Fru	2026-07-13 21:28:46 (1 hour ago)	Jul 13 23:28:42 [redacted] dovecot: imap-login: Disconnected: Too many invalid commands (no auth att ... show more Jul 13 23:28:42 [redacted] dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=159.65.111.3, lip=[redacted], session=<QSlOxoRWaKKfQW8D> ... show less	Email Spam Brute-Force
🇺🇸 MPL	2026-07-13 17:09:10 (6 hours ago)	tcp/3389 (2 or more attempts)	Port Scan
Anonymous	2026-07-13 14:21:22 (8 hours ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 Axel	2026-07-13 12:41:25 (10 hours ago)	Blocked by UFW on LAXHH [5900/tcp] \| SPT: 45255 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [5900/tcp] \| SPT: 45255 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-12 17:35:12 (1 day ago)	CrowdSec blocked IP for crowdsecurity/http-probing on vps_agent	Web App Attack
🇨🇦 Blinker73	2026-07-12 09:53:53 (1 day ago)	159.65.111.3 - - [12/Jul/2026:05:53:52 -0400] "lv\|'\|'\|VHJvamFuX0M0NkY2RTk=\|'\|'\|MARK\|'\|'\|user\|'\|'\|201 ... show more 159.65.111.3 - - [12/Jul/2026:05:53:52 -0400] "lv\|'\|'\|VHJvamFuX0M0NkY2RTk=\|'\|'\|MARK\|'\|'\|user\|'\|'\|2013-11-22\|'\|'\|\|'\|'\|Win XP\|'\|'\|No\|'\|'\|0.6.4\|'\|'\|..\|'\|'\|\|'\|'\|[endof]" 400 150 "-" "-" 159.65.111.3 - - [12/Jul/2026:05:53:52 -0400] "Gh0st\xAD\x00\x00\x00\xE0\x00\x00\x00x\x9CKS``\x98\xC3\xC0\xC0\xC0\x06\xC4\x8C@\xBCQ\x96\x81\x81\x09H\x07\xA7\x16\x95e&\xA7*\x04$&g+\x182\x94\xF6\xB000\xAC\xA8rc\x00\x01\x11\xA0\x82\x1F\x5C`&\x83\xC7K7\x86\x19\xE5n\x0C9\x95n\x0C;\x84\x0F3\xAC\xE8sch\xA8^\xCF4'J\x97\xA9\x82\xE30\xC3\x91h]&\x90\xF8\xCE\x97S\xCBA4L?2=\xE1\xC4\x92\x86\x0B@\xF5`\x0CT\x1F\xAE\xAF]" 400 150 "-" "-" show less	Bad Web Bot Web App Attack
🇦🇺 afleventoffice.com.au	2026-07-12 09:40:00 (1 day ago)	GET /_layouts/15/error.aspx HTTP/1.1	Web App Attack
🇺🇸 Axel	2026-07-12 09:26:04 (1 day ago)	Blocked by UFW on LAXHH [8443/tcp] \| SPT: 47779 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8443/tcp] \| SPT: 47779 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 IndigoRidge	2026-07-11 21:02:32 (2 days ago)	Knock-Knock HTTP honeypot activity; time=2026-07-11 20:59:21; http_method=GET; http_path=/; http_pur ... show more Knock-Knock HTTP honeypot activity; time=2026-07-11 20:59:21; http_method=GET; http_path=/; http_purpose=basic_probe show less	Web App Attack
🇳🇵 radheykrishna.com.np	2026-07-09 09:34:39 (4 days ago)	Jul 9 15:19:38 kernel: [7079569.062763] [UFW BLOCK] IN=ens160 OUT= SRC=159.65.111.3 LEN=44 TOS=0x00 ... show more Jul 9 15:19:38 kernel: [7079569.062763] [UFW BLOCK] IN=ens160 OUT= SRC=159.65.111.3 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=50735 PROTO=TCP SPT=48833 DPT=8443 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Axel	2026-07-09 09:29:56 (4 days ago)	Blocked by UFW on LAXHH [8443/tcp] \| SPT: 48833 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8443/tcp] \| SPT: 48833 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-03 20:25:34 (1 week ago)	Blocked by UFW (TCP on 8040) Source port: 48912 TTL: 245 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8040) Source port: 48912 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 159.65.111.3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-07-03 20:07:13 (1 week ago)	Blocked by UFW on LAXHH [8040/tcp] \| SPT: 48896 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8040/tcp] \| SPT: 48896 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-07-03 14:08:16 (1 week ago)	tcp/6666	Port Scan
🇺🇸 xmission.com	2026-07-03 13:39:05 (1 week ago)	Blocked by UFW (TCP on 6380) Source port: 45502 TTL: 245 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 6380) Source port: 45502 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 159.65.111.3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.138

🇬🇧 165.154.129.74

🇳🇿 103.14.69.13

🇬🇧 35.203.210.40

🇺🇸 162.216.149.246

🇨🇦 139.177.196.169

🇰🇷 121.178.185.141

🇮🇩 103.190.214.241

🇺🇸 76.142.130.51

🇺🇸 69.73.187.130

🇺🇸 66.132.195.53

🇺🇸 45.131.194.129

🇺🇸 198.12.254.228

🇳🇱 195.178.110.30

🇨🇳 159.75.70.225

🇺🇸 107.175.222.235

🇨🇳 58.222.72.182

🇳🇱 45.153.34.161

🇲🇽 187.216.224.85

🇧🇷 181.224.3.170