JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.134.131

159.65.134.131 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.65.134.131

Whois 159.65.134.131

IP Abuse Reports for 159.65.134.131:

This IP address has been reported a total of 30 times from 27 distinct sources. 159.65.134.131 was first reported on February 25th 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 JCB	2025-03-03 18:21:00 (1 year ago)	159.65.134.131 - - [03/Mar/2025:08:24:09 +0200] "\x16\x03\x01" 400 226 "-" "-" 159.65.134.131 - - [ ... show more 159.65.134.131 - - [03/Mar/2025:08:24:09 +0200] "\x16\x03\x01" 400 226 "-" "-" 159.65.134.131 - - [03/Mar/2025:08:24:10 +0200] "\x16\x03\x01" 400 226 "-" "-" 159.65.134.131 - - [03/Mar/2025:08:24:11 +0200] "GET /form.html HTTP/1.1" 404 196 "-" "curl/8.1.2" ... show less	Hacking Web App Attack
🇫🇷 geot	2025-03-03 13:10:18 (1 year ago)	GET /form.html HTTP/1.1 GET /upl.php HTTP/1.1 GET /alive.php HTTP/1.1 GET /ab2g HTTP/1.1 GET /1.php ... show more GET /form.html HTTP/1.1 GET /upl.php HTTP/1.1 GET /alive.php HTTP/1.1 GET /ab2g HTTP/1.1 GET /1.php HTTP/1.1 GET /password.php HTTP/1.1 GET /geoip/ HTTP/1.1 GET /ab2h HTTP/1.1 GET /teorema505?t=1 HTTP/1.1 GET /t4 HTTP/1.1 GET /systembc/password.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 cusezar.com	2025-03-03 10:00:06 (1 year ago)	159.65.134.131 /	Brute-Force
🇸🇬 Charles	2025-03-03 09:26:52 (1 year ago)	[Mon Mar 03 17:26:49.810353 2025] [proxy_fcgi:error] [pid 2542221:tid 2542271] [client 159.65.134.13 ... show more [Mon Mar 03 17:26:49.810353 2025] [proxy_fcgi:error] [pid 2542221:tid 2542271] [client 159.65.134.131:43226] AH01071: Got error 'Primary script unknown' [Mon Mar 03 17:26:49.828825 2025] [proxy_fcgi:error] [pid 2542221:tid 2542286] [client 159.65.134.131:43272] AH01071: Got error 'Primary script unknown' [Mon Mar 03 17:26:49.840106 2025] [proxy_fcgi:error] [pid 2542222:tid 2542319] [client 159.65.134.131:43294] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH
🇺🇸 gu-alvareza	2025-03-03 07:05:10 (1 year ago)	SystemBC.Botnet	DDoS Attack Hacking
🇦🇺 ozisp.com.au	2025-03-03 05:13:51 (1 year ago)	US_DigitalOcean,_<33>1740978830 [119:33:2] (http_inspect) UNESCAPED SPACE IN HTTP URI [Classificatio ... show more US_DigitalOcean,_<33>1740978830 [119:33:2] (http_inspect) UNESCAPED SPACE IN HTTP URI [Classification: Unknown Traffic] [Priority: 3] {TCP} 159.65.134.131:60014 show less	Hacking
🇧🇪 Ciaran	2025-03-03 03:54:17 (1 year ago)	Honeypot hit from 159.65.134.131 targeting a server in Belgium. Unauthorized HTTP access attempt to ... show more Honeypot hit from 159.65.134.131 targeting a server in Belgium. Unauthorized HTTP access attempt to path "/", "/form.html", "/upl.php", "/t4", "/geoip/" show less	Bad Web Bot Web App Attack
🇺🇸 Gabriel Camargo	2025-03-03 02:09:28 (1 year ago)	159.65.134.131 - - [02/Mar/2025:21:09:26 -0500] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 1 ... show more 159.65.134.131 - - [02/Mar/2025:21:09:26 -0500] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 159.65.134.131 - - [02/Mar/2025:21:09:27 -0500] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" 159.65.134.131 - - [02/Mar/2025:21:09:27 -0500] "GET /t4 HTTP/1.1" 404 134 "-" "Mozilla/5.0" ... show less	Brute-Force SSH
🇬🇧 no1knows.com	2025-03-03 00:52:41 (1 year ago)	2025/03/03 00:52:36 [error] 4001970#4001970: 209875 FastCGI sent in stderr: "Primary script unknown ... show more 2025/03/03 00:52:36 [error] 4001970#4001970: 209875 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 159.65.134.131, server: _, request: "GET /upl.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "185.176.161.108" 2025/03/03 00:52:38 [error] 4001967#4001967: 209880 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 159.65.134.131, server: _, request: "GET /1.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "185.176.161.108" 2025/03/03 00:52:38 [error] 4001967#4001967: 209882 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 159.65.134.131, server: _, request: "GET /systembc/password.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "185.176.161.108" ... show less	Brute-Force Bad Web Bot
Anonymous	2025-03-03 00:24:52 (1 year ago)	[Sun Mar 02 19:24:47.811604 2025] [proxy_fcgi:error] [pid 838388:tid 838388] [client 159.65.134.131: ... show more [Sun Mar 02 19:24:47.811604 2025] [proxy_fcgi:error] [pid 838388:tid 838388] [client 159.65.134.131:52982] AH01071: Got error 'Primary script unknown' [Sun Mar 02 19:24:49.854762 2025] [proxy_fcgi:error] [pid 907139:tid 907139] [client 159.65.134.131:53020] AH01071: Got error 'Primary script unknown' [Sun Mar 02 19:24:50.819648 2025] [proxy_fcgi:error] [pid 838289:tid 838289] [client 159.65.134.131:53042] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇸🇪 webbfabriken	2025-03-03 00:22:40 (1 year ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
🇺🇸 MPL	2025-03-02 21:53:44 (1 year ago)	tcp/80 (3 or more attempts)	Port Scan
🇺🇸 MPL	2025-03-02 21:34:32 (1 year ago)	tcp/80 (3 or more attempts)	Port Scan
🇧🇷 diego	2025-03-02 21:23:15 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 7 times in the last 10800 seconds	DDoS Attack
🇭🇰 Harold Wong	2025-03-02 21:06:02 (1 year ago)	$f2bV_matches	Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.196.152.21

🇺🇿 213.230.65.53

🇸🇪 195.178.191.5

🇺🇸 172.253.1.29

🇩🇪 165.227.159.13

🇺🇸 161.0.2.22

🇮🇩 158.140.171.46

🇹🇭 106.0.166.123

🇨🇦 99.246.128.161

🇫🇮 95.81.112.138

🇮🇱 89.139.52.4

🇷🇴 80.94.92.182

🇺🇸 66.132.224.79

🇪🇬 62.139.191.57

🇨🇭 35.216.144.195

🇬🇧 35.203.210.98

🇳🇱 34.178.219.202

🇧🇷 186.208.74.13

🇮🇹 172.253.228.157

🇨🇳 123.144.29.40