JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.135.96

159.65.135.96 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.65.135.96

Whois 159.65.135.96

IP Abuse Reports for 159.65.135.96:

This IP address has been reported a total of 50 times from 31 distinct sources. 159.65.135.96 was first reported on July 10th 2023, and the most recent report was 45 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-16 14:52:56 (45 minutes ago)		Web App Attack
🇨🇦 polycoda	2026-06-16 11:40:18 (3 hours ago)	📄 Probes for wp-login.php and other inexistent URLs	Hacking Web App Attack
🇩🇪 raspi4	2026-06-16 07:40:33 (7 hours ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
🇩🇪 BlueWire Hosting	2026-06-16 06:44:56 (8 hours ago)	Bad bot ignoring robot.txt	Bad Web Bot
Anonymous	2026-06-15 21:20:09 (18 hours ago)	Web attack blocked by Wordfence on kernoverlegsibbe-ijzeren.nl (146 hits). Reported by CRMON.	Web App Attack
🇳🇱 Site.eu	2026-06-15 21:10:20 (18 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 FeG Deutschland	2026-06-15 17:39:03 (21 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
Anonymous	2026-06-15 14:51:07 (1 day ago)	Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/1.1	Hacking Web App Attack
🇩🇪 Ba-Yu	2026-06-15 12:03:16 (1 day ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 20:40:46 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 2002:9f41:8760::9f41:8760 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 2002:9f41:8760::9f41:8760 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:40:40.743312 2026] [security2:error] [pid 4446:tid 4446] [client 2002:9f41:8760::9f41:8760:50581] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dianamead.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dianamead.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai8RyFum6GV1viPV__BgGgAAADE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-06-14 20:29:29 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 15:08:07 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 159.65.135.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 159.65.135.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 11:08:02.651803 2026] [security2:error] [pid 8482:tid 8482] [client 159.65.135.96:53445] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|aabondwnc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aabondwnc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai7D0uUt-YoS6zpmYh3_TQAAAAw"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 14:40:24 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 159.65.135.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 159.65.135.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 10:40:17.864075 2026] [security2:error] [pid 21625:tid 21625] [client 159.65.135.96:53664] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mail.dianamead.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.dianamead.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai69UUgH76vSH210iRaAXwAAABM"], referer: https://www.bing.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TAY	2026-06-14 12:23:59 (2 days ago)	159.65.135.96 - - [14/Jun/2026:20:23:57 +0800] "POST /wp-login.php HTTP/1.1" 200 3024 "https://autis ... show more 159.65.135.96 - - [14/Jun/2026:20:23:57 +0800] "POST /wp-login.php HTTP/1.1" 200 3024 "https://autism-cvc.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 159.65.135.96 - - [14/Jun/2026:20:23:58 +0800] "POST /wp-login.php HTTP/1.1" 200 3028 "https://autism-cvc.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 159.65.135.96 - - [14/Jun/2026:20:23:59 +0800] "POST /wp-login.php HTTP/1.1" 200 8849 "https://autism-cvc.org/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" ... show less	Brute-Force
🇫🇷 dynamix	2026-06-14 10:25:58 (2 days ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 152.67.48.120

🇳🇱 89.21.67.150

🇰🇪 217.199.144.86

🇭🇰 199.45.154.185

🇺🇸 172.245.43.228

🇺🇸 162.216.150.86

🇱🇹 91.224.92.17

🇵🇱 83.168.107.158

🇳🇱 45.148.10.141

🇺🇸 38.34.175.20

🇺🇸 23.171.9.140

🇩🇪 2a04:c300:400::1fb

🇺🇸 172.184.211.43

🇭🇰 119.28.9.170

🇭🇰 116.204.186.10

🇺🇸 64.62.156.230

🇺🇸 35.208.12.255

🇻🇳 14.225.210.33

🇺🇦 176.103.0.129

🇺🇸 152.53.53.142