JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.152.99

159.65.152.99 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇮🇳 India
City	Bashettihalli, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.65.152.99

Whois 159.65.152.99

IP Abuse Reports for 159.65.152.99:

This IP address has been reported a total of 73 times from 59 distinct sources. 159.65.152.99 was first reported on December 28th 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 BennetLe	2026-07-22 02:18:41 (2 hours ago)	Jul 22 04:18:34 ubuntu sshd[486414]: Invalid user user from 159.65.152.99 port 50274 Jul 22 04:18:36 ... show more Jul 22 04:18:34 ubuntu sshd[486414]: Invalid user user from 159.65.152.99 port 50274 Jul 22 04:18:36 ubuntu sshd[486441]: Invalid user user from 159.65.152.99 port 50284 Jul 22 04:18:37 ubuntu sshd[486458]: Invalid user user from 159.65.152.99 port 50292 Jul 22 04:18:39 ubuntu sshd[486508]: Invalid user user from 159.65.152.99 port 50298 Jul 22 04:18:40 ubuntu sshd[486525]: Invalid user user from 159.65.152.99 port 50308 Jul 22 04:18:41 ubuntu sshd[486539]: Invalid user user from 159.65.152.99 port 50324 ... show less	Brute-Force SSH
🇺🇸 COMPLEX	2026-07-22 00:29:08 (4 hours ago)	Banned by Multi Agent · node …ffcd · attempts=5 · SSH brute-force / scan	Brute-Force SSH
🇪🇸 scotynau	2026-07-21 23:27:20 (5 hours ago)	2026-07-21T23:27:17.983777+00:00 bastionez sshd[1414149]: Invalid user user from 159.65.152.99 port ... show more 2026-07-21T23:27:17.983777+00:00 bastionez sshd[1414149]: Invalid user user from 159.65.152.99 port 50844 2026-07-21T23:27:19.612941+00:00 bastionez sshd[1414151]: Invalid user user from 159.65.152.99 port 33268 ... show less	Brute-Force SSH
🇮🇹 CoreTech srl	2026-07-21 22:56:16 (5 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇹🇷 SeczarSecureOps	2026-07-21 21:37:29 (6 hours ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (7 events in 5 ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (7 events in 5min) at 2026-07-21 21:36 show less	Web App Attack
🇩🇪 D3vNu11	2026-07-21 19:55:49 (8 hours ago)	Level: (LOW): Known Attacker via Cowrie IOC Country: India 2x -> Target Country: Ashburn, USA SSH	Hacking Brute-Force SSH
🇩🇪 ipcop.net	2026-07-21 19:22:50 (9 hours ago)	2026-07-21T21:22:42.839592+02:00 router01.kfz-heimchen.de sshd-session[2162889]: Connection closed b ... show more 2026-07-21T21:22:42.839592+02:00 router01.kfz-heimchen.de sshd-session[2162889]: Connection closed by authenticating user root 159.65.152.99 port 43516 [preauth] 2026-07-21T21:22:45.119193+02:00 router01.kfz-heimchen.de sshd-session[2162894]: Connection closed by authenticating user root 159.65.152.99 port 54934 [preauth] 2026-07-21T21:22:47.294641+02:00 router01.kfz-heimchen.de sshd-session[2162903]: Connection closed by authenticating user root 159.65.152.99 port 54940 [preauth] 2026-07-21T21:22:48.801412+02:00 router01.kfz-heimchen.de sshd-session[2162909]: Connection closed by authenticating user root 159.65.152.99 port 54942 [preauth] 2026-07-21T21:22:50.300672+02:00 router01.kfz-heimchen.de sshd-session[2162916]: Connection closed by authenticating user root 159.65.152.99 port 54956 [preauth] show less	Brute-Force
🇫🇮 pr0vieh	2026-07-21 18:47:43 (9 hours ago)	2026-07-21T20:47:24.192332+02:00 Linux12 sshd-session[3393391]: pam_unix(sshd:auth): authentication ... show more 2026-07-21T20:47:24.192332+02:00 Linux12 sshd-session[3393391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.152.99 user=root 2026-07-21T20:47:26.099390+02:00 Linux12 sshd-session[3393391]: Failed password for root from 159.65.152.99 port 60602 ssh2 2026-07-21T20:47:27.111127+02:00 Linux12 sshd-session[3393503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.152.99 user=root 2026-07-21T20:47:29.642397+02:00 Linux12 sshd-session[3393503]: Failed password for root from 159.65.152.99 port 60616 ssh2 2026-07-21T20:47:31.965475+02:00 Linux12 sshd-session[3393880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.152.99 user=root 2026-07-21T20:47:34.251390+02:00 Linux12 sshd-session[3393880]: Failed password for root from 159.65.152.99 port 60628 ssh2 2026-07-21T20:47:36.908137+02:00 Linux12 sshd-session[3394092]: pam_unix(sshd:auth): authenticati ... show less	Brute-Force SSH
🇺🇸 RAP	2026-07-21 16:40:01 (11 hours ago)	2026-07-21 16:40:01 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇩🇪 LoNET	2026-07-21 16:15:55 (12 hours ago)	Report 2565734 with IP 3613301 for SSH brute-force attack by source 3607959 via ssh-honeypot/0.2.1+h ... show more Report 2565734 with IP 3613301 for SSH brute-force attack by source 3607959 via ssh-honeypot/0.2.1+http show less	Brute-Force SSH
🇬🇧 Bytemark	2026-07-21 15:59:10 (12 hours ago)	2026-07-21T16:59:07.520514+01:00 dlcentre3 sshd[3426801]: Invalid user user from 159.65.152.99 port ... show more 2026-07-21T16:59:07.520514+01:00 dlcentre3 sshd[3426801]: Invalid user user from 159.65.152.99 port 51992 2026-07-21T16:59:08.393347+01:00 dlcentre3 sshd[3426803]: Invalid user user from 159.65.152.99 port 52000 2026-07-21T16:59:09.256364+01:00 dlcentre3 sshd[3426805]: Invalid user user from 159.65.152.99 port 52004 show less	Brute-Force SSH
🇩🇪 3619	2026-07-21 15:26:26 (13 hours ago)	2026-07-21T15:26:21.789776+00:00 csmaps sshd[3006822]: Connection closed by authenticating user root ... show more 2026-07-21T15:26:21.789776+00:00 csmaps sshd[3006822]: Connection closed by authenticating user root 159.65.152.99 port 48534 [preauth] 2026-07-21T15:26:22.675530+00:00 csmaps sshd[3006847]: Connection closed by authenticating user root 159.65.152.99 port 48540 [preauth] 2026-07-21T15:26:23.558557+00:00 csmaps sshd[3006850]: Connection closed by authenticating user root 159.65.152.99 port 48548 [preauth] 2026-07-21T15:26:24.423161+00:00 csmaps sshd[3006854]: Connection closed by authenticating user root 159.65.152.99 port 55584 [preauth] 2026-07-21T15:26:25.287298+00:00 csmaps sshd[3006858]: Connection closed by authenticating user root 159.65.152.99 port 55596 [preauth] ... show less	Brute-Force SSH
🇸🇬 digitalsekuriti.id	2026-07-21 14:30:26 (13 hours ago)	2026-07-21T14:30:25.326454+00:00 auxonode sshd[405080]: Invalid user user from 159.65.152.99 port 54 ... show more 2026-07-21T14:30:25.326454+00:00 auxonode sshd[405080]: Invalid user user from 159.65.152.99 port 54790 2026-07-21T14:30:25.601382+00:00 auxonode sshd[405082]: Invalid user user from 159.65.152.99 port 54806 2026-07-21T14:30:25.880553+00:00 auxonode sshd[405084]: Invalid user user from 159.65.152.99 port 54814 ... show less	Brute-Force SSH
🇳🇱 trivox.sh	2026-07-21 14:29:13 (14 hours ago)	2026-07-21T16:29:06.597320+02:00 libre sshd[809673]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-07-21T16:29:06.597320+02:00 libre sshd[809673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.152.99 user=root 2026-07-21T16:29:08.280135+02:00 libre sshd[809673]: Failed password for root from 159.65.152.99 port 42408 ssh2 2026-07-21T16:29:09.193488+02:00 libre sshd[809673]: Connection closed by authenticating user root 159.65.152.99 port 42408 [preauth] 2026-07-21T16:29:10.208643+02:00 libre sshd[809675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.152.99 user=root 2026-07-21T16:29:12.442160+02:00 libre sshd[809675]: Failed password for root from 159.65.152.99 port 42410 ssh2 ... show less	Brute-Force SSH
🇬🇧 Smish	2026-07-21 11:05:07 (17 hours ago)	(sshd) Failed SSH login from 159.65.152.99 (IN/India/-): 5 in the last 3600 secs; Ports: ; Directio ... show more (sshd) Failed SSH login from 159.65.152.99 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jul 21 12:04:29 webhosting2 sshd[17554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.152.99 user=root Jul 21 12:04:32 webhosting2 sshd[17554]: Failed password for root from 159.65.152.99 port 38792 ssh2 Jul 21 12:04:33 webhosting2 sshd[17559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.152.99 user=root Jul 21 12:04:35 webhosting2 sshd[17559]: Failed password for root from 159.65.152.99 port 38804 ssh2 Jul 21 12:04:36 webhosting2 sshd[17565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.152.99 user=root show less	Brute-Force

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 197.39.202.56

🇦🇲 195.250.79.2

🇮🇳 182.73.176.186

🇨🇳 221.131.139.70

🇳🇱 195.178.110.211

🇧🇷 191.235.102.147

🇺🇸 184.105.139.69

🇺🇸 104.26.5.165

🇵🇭 103.235.92.230

🇳🇱 92.112.126.183

🇺🇸 65.49.1.51

🇵🇰 39.38.211.6

🇺🇸 20.127.200.74

🇰🇷 211.33.122.236

🇳🇱 195.178.110.217

🇺🇸 172.239.64.155

🇧🇷 138.36.57.172

🇧🇩 103.198.133.10

🇮🇳 103.148.206.99

🇳🇱 91.92.40.202