JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.130.4

159.65.130.4 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.65.130.4

Whois 159.65.130.4

IP Abuse Reports for 159.65.130.4:

This IP address has been reported a total of 56 times from 43 distinct sources. 159.65.130.4 was first reported on August 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Bay13	2026-08-21 15:30:48 (1 day ago)	CrowdSec:custom/http-backdoors-attempts	Web App Attack
Anonymous	2026-08-21 14:24:28 (1 day ago)	159.65.130.4 - - [21/Aug/2026:14:24:27 +0000] "GET /wp-login.php HTTP/1.1" 302 4761 "https://www.goo ... show more 159.65.130.4 - - [21/Aug/2026:14:24:27 +0000] "GET /wp-login.php HTTP/1.1" 302 4761 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" ... show less	Bad Web Bot Web App Attack
🇺🇸 rsiddall	2026-08-21 10:57:26 (1 day ago)	159.65.130.4 - - [21/Aug/2026:06:57:01 -0400] "POST /wp-login.php HTTP/1.1" 301 248 "https://darwind ... show more 159.65.130.4 - - [21/Aug/2026:06:57:01 -0400] "POST /wp-login.php HTTP/1.1" 301 248 "https://darwindayct.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/120.0.1" 159.65.130.4 - - [21/Aug/2026:06:57:06 -0400] "POST /wp-login.php HTTP/1.1" 301 248 "https://darwindayct.org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 159.65.130.4 - - [21/Aug/2026:06:57:11 -0400] "POST /wp-login.php HTTP/1.1" 301 248 "https://darwindayct.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/122.0" 159.65.130.4 - - [21/Aug/2026:06:57:16 -0400] "POST /wp-login.php HTTP/1.1" 301 248 "https://darwindayct.org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/119.0.1" 159.65.130.4 - - [21/Aug/2026:06:57:21 -0400] "POST /wp-login.php HTTP/1.1" 301 248 "https://darwindayct.org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox ... show less	Brute-Force
🇩🇪 LRob	2026-08-21 09:21:23 (2 days ago)	L7 DDoS: hammering a site's endpoints (login page, AJAX, dynamic pages) with automated requests far ... show more L7 DDoS: hammering a site's endpoints (login page, AJAX, dynamic pages) with automated requests far beyond any human use \| path: /wp-login.php show less	DDoS Attack Web App Attack
🇺🇸 lostswordfish.com	2026-08-20 20:32:03 (2 days ago)	Wordfence waf block on jestrellafoundation	Web App Attack
🇺🇸 rsiddall	2026-08-20 20:18:59 (2 days ago)	159.65.130.4 - - [20/Aug/2026:16:18:28 -0400] "POST /wp-login.php HTTP/1.1" 301 248 "https://darwind ... show more 159.65.130.4 - - [20/Aug/2026:16:18:28 -0400] "POST /wp-login.php HTTP/1.1" 301 248 "https://darwindayct.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 159.65.130.4 - - [20/Aug/2026:16:18:38 -0400] "POST /wp-login.php HTTP/1.1" 301 248 "https://darwindayct.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 159.65.130.4 - - [20/Aug/2026:16:18:44 -0400] "POST /wp-login.php HTTP/1.1" 301 248 "https://darwindayct.org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 159.65.130.4 - - [20/Aug/2026:16:18:49 -0400] "POST /wp-login.php HTTP/1.1" 301 248 "https://darwindayct.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 159.65.130.4 - - [20/Aug/2026:16:18:53 -0400] "POST /wp-login.php HTTP/1.1" 301 2 ... show less	Brute-Force
🇺🇸 bigwavedave	2026-08-20 19:39:32 (2 days ago)	Wordpress Attack	Web App Attack
🇩🇪 on-com	2026-08-20 19:17:26 (2 days ago)	URL scan	Brute-Force Web App Attack
🇬🇧 consul.to	2026-08-20 18:43:34 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇪 taivas.nl	2026-08-20 18:02:16 (2 days ago)	Wordpress_login_attempts	Bad Web Bot
🇺🇸 maxasp.net	2026-08-20 17:44:21 (2 days ago)	Failed WP Login Attempts 5 DDoS Count 5	Brute-Force
🇨🇦 KIsmay	2026-08-20 16:55:42 (2 days ago)	Aug 20 12:54:58 www4 WPAudit[916236]: 159.65.130.4 bestnelson.org "Mozilla/5.0 (Macintosh; Intel Mac ... show more Aug 20 12:54:58 www4 WPAudit[916236]: 159.65.130.4 bestnelson.org "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" david.pueray:*Pde98&Qfvhh3vvU$ FAIL Aug 20 12:55:10 www4 WPAudit[916235]: 159.65.130.4 bestnelson.org "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" seobackup:FsSAj1bKldSAO2@! FAIL Aug 20 12:55:21 www4 WPAudit[916236]: 159.65.130.4 bestnelson.org "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ipapsuic:s-.CmpxSka^If>6JV7;E FAIL Aug 20 12:55:31 www4 WPAudit[916235]: 159.65.130.4 bestnelson.org "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" adminlin:admin_lin FAIL Aug 20 12:55:41 www4 WPAudit[916236]: 159.65.130.4 bestnelson.org "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 F ... show less	Brute-Force Web App Attack
🇪🇸 ofm-abuse	2026-08-20 16:42:45 (2 days ago)	Brute-force ...	Brute-Force Web App Attack Bad Web Bot
🇪🇸 alferez	2026-08-19 23:32:49 (3 days ago)	Multiple WP Login Attack	Hacking Exploited Host Web App Attack
🇳🇱 Site.eu	2026-08-19 22:19:56 (3 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 188.166.117.11

🇧🇷 186.211.103.221

🇸🇬 94.231.206.134

🇷🇴 80.94.92.179

🇭🇰 43.161.233.190

🇱🇹 213.176.26.114

🇸🇾 205.209.65.70

🇺🇸 172.203.224.88

🇺🇸 162.216.150.216

🇩🇪 141.95.19.37

🇮🇩 123.231.171.242

🇭🇰 101.36.106.134

🇲🇷 82.151.84.22

🇧🇷 45.205.1.246

🇪🇬 41.38.50.27

🇺🇸 40.124.80.250

🇬🇧 35.214.44.243

🇺🇸 18.97.26.16

🇺🇸 192.3.176.32

🇵🇱 149.50.107.42