JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.136.249

159.65.136.249 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.65.136.249

Whois 159.65.136.249

IP Abuse Reports for 159.65.136.249:

This IP address has been reported a total of 74 times from 51 distinct sources. 159.65.136.249 was first reported on November 15th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-08-18 04:48:24 (1 week ago)	Try to access /.git/config	Web App Attack
🇩🇪 EGP Abuse Dept	2026-08-18 00:30:49 (1 week ago)	Scanning for web/db/file exploits on joldersma-wonen.tafelconfigurator.nl	SQL Injection Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-17 23:22:05 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇨🇭 dalslab ltd	2026-08-17 16:01:25 (1 week ago)	[17/Aug/2026:18:01:22 +0200] - 404 404 - GET https search.dalslab.com "/.git/config" [Client 159.65. ... show more [17/Aug/2026:18:01:22 +0200] - 404 404 - GET https search.dalslab.com "/.git/config" [Client 159.65.136.249] [Length 2217] [Gzip 2.15] [Sent-to 10.1.1.41] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [17/Aug/2026:18:01:23 +0200] - 404 404 - GET https search.dalslab.com "/.env" [Client 159.65.136.249] [Length 2217] [Gzip 2.15] [Sent-to 10.1.1.41] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [17/Aug/2026:18:01:24 +0200] - 404 404 - GET https search.dalslab.com "/.env.local" [Client 159.65.136.249] [Length 2217] [Gzip 2.15] [Sent-to 10.1.1.41] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [17/Aug/2026:18:01:24 +0200] - 404 404 - GET https search.dalslab.com "/.env.production" [Client 159.65.136.249] [Length 2217] [Gzip 2.15] [Sent-to 10.1.1.41] "Mozilla/5.0 ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-17 11:15:13 (1 week ago)	Automatic report - Vulnerability scan /	Web App Attack
🇩🇪 ger-stg-sifi1	2026-08-17 01:58:32 (1 week ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 masterguru	2026-08-16 16:41:50 (1 week ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇳🇱 Site.eu	2026-08-16 14:39:52 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 XICTRON	2026-08-16 11:05:05 (1 week ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
Anonymous	2026-08-16 07:08:32 (1 week ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Co ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=SG; ASN=14061 DIGITALOCEAN-ASN show less	Hacking
Anonymous	2026-08-16 06:00:20 (1 week ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Event ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=_,incognet-checkout.isp.llc; Paths=/.env,/.env.development,/.env.local,/.env.staging,/.git/config; Country=SG; ASN=14061 DIGITALOCEAN-ASN show less	Hacking Web App Attack
Anonymous	2026-08-16 05:09:53 (1 week ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-probing; Action=ban; Events=11; Ho ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-probing; Action=ban; Events=11; Hosts=incognet-checkout.isp.llc; Paths=/,/.env,/.env.backup,/.env.bak,/.env.dev,/.env.example,/.env.old,/.env.remote; Country=SG; ASN=14061 DIGITALOCEAN-ASN show less	Port Scan Web App Attack
Anonymous	2026-08-16 04:04:51 (1 week ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-admin-interface-probing; Action=ba ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-admin-interface-probing; Action=ban; Events=4; Hosts=incognet-checkout.isp.llc; Paths=/administrator/.env,/phpinfo,/phpinfo.php; Country=SG; ASN=14061 DIGITALOCEAN-ASN show less	Port Scan Web App Attack
🇫🇷 Stara	2026-08-15 19:44:18 (1 week ago)	ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)	Brute-Force SSH Web App Attack
🇲🇾 Rizzy	2026-08-15 11:21:52 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇲 109.75.36.147

🇮🇳 49.43.154.181

🇧🇷 179.176.210.17

🇧🇬 158.173.89.65

🇦🇹 68.210.201.17

🇵🇭 61.9.8.120

🇳🇱 45.148.10.151

🇬🇧 45.82.76.106

🇺🇸 43.166.242.149

🇺🇸 18.119.209.50

🇺🇿 213.230.86.204

🇨🇱 200.28.42.135

🇺🇸 174.138.35.11

🇺🇸 162.216.150.19

🇮🇳 122.168.194.41

🇺🇸 104.199.127.115

🇬🇧 89.37.172.146

🇨🇦 85.217.149.20

🇫🇷 85.217.140.45

🇧🇬 79.124.62.134