159.65.148.99

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
248 reports
102 reporters · latest 11 months ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇮🇳 India
City
Bengaluru, Karnataka
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

159.65.148.99 has been reported 248 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
248 from 102 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 RAP
2025-11-16 21:52:51 UTC Unauthorized activity to TCP port 3306.
Port Scan
🇧🇪 cmbplf
1.239 POST requests with url.path */wp-login.php
Brute-Force Bad Web Bot
🇮🇹 alph44
WordPress attack detected by fail2ban: 3 failed attempts
Web App Attack
Anonymous
wordpress-trap
Web App Attack
🇧🇪 boxed-it
GET /.env (Tarpitted for 1d15h8m29s, wasted 8.06MB)
Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇧🇪 boxed-it
GET /.env (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
🇧🇪 sid3windr
GET /.env (Tarpitted for 1d15h8m31s, wasted 8.06MB)
Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪 SpaceHost-Server
Brute-Force Web App Attack
🇩🇪 Vegascosmetics
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇬🇧 Joe-Mark
Found duggytuxy Blocklist / proto=6 . srcport=37946 . dstport=443 HTTPS . (2745)
Port Scan
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇷🇺 cybertailor
Port Scan
🇵🇱 IT RDC
2025/09/27 10:58:36 [info] 5233#0: *2076 client sent plain HTTP request to HTTPS port while reading client request headers, client: 159.65.148.99, server: zimbra, request: "GET /.env HTTP/1.1", host: "83.238.86.42:443" ...
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 170.168.174.223
🇺🇸 135.136.36.117
🇮🇳 122.175.49.124
🇩🇪 69.5.169.90
🇸🇬 47.84.142.61
🇰🇷 222.117.173.94
🇺🇸 217.181.64.211
🇺🇸 209.101.216.160
🇺🇸 195.63.0.66
🇧🇷 187.68.161.207
🇺🇸 162.216.149.109
🇨🇱 152.230.128.165
🇧🇷 138.59.210.85
🇨🇳 115.191.27.238
🇬🇪 91.231.218.149
🇮🇪 54.171.15.238
🇳🇱 204.76.203.221
🇲🇾 203.121.106.56
🇹🇼 198.235.24.124
🇳🇱 193.47.62.111
feedback