JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.65.154.3

Neutral Activity

Abuse Confidence Score

0% Low Risk

48 reports

31 reporters · latest 4 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇮🇳 India
City: Bengaluru, Karnataka

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.65.154.3 has been reported 48 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

48 from 31 distinct reporters

First reported

October 24th 2024

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Da_tschek	2026-06-21 18:52:42 UTC · (4 months ago)	Port scanning	Port Scan Hacking
🇹🇷 rtbh.com.tr	2025-09-23 20:08:57 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-23 00:08:56 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-22 20:08:56 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-09-22 07:44:01 UTC · (1 year ago)	reported through recidive - multiple failed attempts(SSH)	Brute-Force Exploited Host SSH
🇺🇸 bigscoots.com	2025-09-22 07:20:51 UTC · (1 year ago)	159.65.154.3 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 22 02:19:58 16620 sshd[21756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more 159.65.154.3 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 22 02:19:58 16620 sshd[21756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.154.3 user=root Sep 22 02:20:01 16620 sshd[21756]: Failed password for root from 159.65.154.3 port 34038 ssh2 Sep 22 02:14:41 16620 sshd[21298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.126.146.174 user=root Sep 22 02:14:43 16620 sshd[21298]: Failed password for root from 101.126.146.174 port 54792 ssh2 Sep 22 02:20:32 16620 sshd[21881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.114.197 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇨🇭 C.Ferris	2025-09-22 06:38:52 UTC · (1 year ago)	Fail2Ban SSHD Brute-force SSH server ...	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-22 06:36:49 UTC · (1 year ago)	(sshd) Failed SSH login from 159.65.154.3 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 22 01:33:17 15967 sshd[23848]: Invalid user mani from 159.65.154.3 port 39556 Sep 22 01:33:19 15967 sshd[23848]: Fail ... show more (sshd) Failed SSH login from 159.65.154.3 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 22 01:33:17 15967 sshd[23848]: Invalid user mani from 159.65.154.3 port 39556 Sep 22 01:33:19 15967 sshd[23848]: Failed password for invalid user mani from 159.65.154.3 port 39556 ssh2 Sep 22 01:35:10 15967 sshd[24106]: Invalid user backup from 159.65.154.3 port 57128 Sep 22 01:35:13 15967 sshd[24106]: Failed password for invalid user backup from 159.65.154.3 port 57128 ssh2 Sep 22 01:36:31 15967 sshd[24237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.154.3 user=root show less	Brute-Force SSH
🇧🇪 madeit	2025-09-22 05:47:47 UTC · (1 year ago)		Brute-Force SSH
🇩🇪 formality	2025-09-22 05:40:08 UTC · (1 year ago)	Invalid user raju from 159.65.154.3 port 59942	Brute-Force SSH
🇧🇪 sid3windr	2025-09-22 05:39:57 UTC · (1 year ago)	2025-09-22T07:39:54.513991+02:00 anakin sshd-session[1366850]: Invalid user raju from 159.65.154.3 port 35758 2025-09-22T07:39:54.521763+02:00 anakin sshd-session[1366850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru ... show more 2025-09-22T07:39:54.513991+02:00 anakin sshd-session[1366850]: Invalid user raju from 159.65.154.3 port 35758 2025-09-22T07:39:54.521763+02:00 anakin sshd-session[1366850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.154.3 2025-09-22T07:39:56.821305+02:00 anakin sshd-session[1366850]: Failed password for invalid user raju from 159.65.154.3 port 35758 ssh2 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-22 05:38:06 UTC · (1 year ago)	159.65.154.3 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 22 00:37:56 14429 sshd[7359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more 159.65.154.3 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 22 00:37:56 14429 sshd[7359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.154.3 user=root Sep 22 00:10:11 14429 sshd[5009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.114.195 user=root Sep 22 00:10:13 14429 sshd[5009]: Failed password for root from 14.103.114.195 port 44818 ssh2 Sep 22 00:09:45 14429 sshd[4935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.217.28 user=root Sep 22 00:09:47 14429 sshd[4935]: Failed password for root from 14.63.217.28 port 50290 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 XICTRON	2025-09-22 04:55:02 UTC · (1 year ago)	SSH brute-force attempt detected by Fail2Ban	SSH
Anonymous	2025-09-22 04:53:37 UTC · (1 year ago)	2025-09-22T04:48:45.411283+00:00 TP72 sshd[252349]: Failed password for invalid user vagrant from 159.65.154.3 port 53422 ssh2 2025-09-22T04:50:04.603637+00:00 TP72 sshd[252860]: Invalid user user14 from 159.65.154.3 port 54208 2025-09-22T04:50:04.60 ... show more 2025-09-22T04:48:45.411283+00:00 TP72 sshd[252349]: Failed password for invalid user vagrant from 159.65.154.3 port 53422 ssh2 2025-09-22T04:50:04.603637+00:00 TP72 sshd[252860]: Invalid user user14 from 159.65.154.3 port 54208 2025-09-22T04:50:04.604873+00:00 TP72 sshd[252860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.154.3 2025-09-22T04:50:06.493516+00:00 TP72 sshd[252860]: Failed password for invalid user user14 from 159.65.154.3 port 54208 ssh2 2025-09-22T04:51:40.320179+00:00 TP72 sshd[253373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.154.3 user=root 2025-09-22T04:51:42.389636+00:00 TP72 sshd[253373]: Failed password for root from 159.65.154.3 port 37228 ssh2 2025-09-22T04:53:34.795010+00:00 TP72 sshd[254010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.154.3 user=root 2025-09-22T04:53:37.180894+00:00 TP72 ... show less	Brute-Force SSH
🇩🇪 oh.mg	2025-09-22 04:49:05 UTC · (1 year ago)	2025-09-22T05:47:24.251001+01:00 frans sshd[1026489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.154.3 user=root 2025-09-22T05:47:26.175009+01:00 frans sshd[1026489]: Failed password for root from ... show more 2025-09-22T05:47:24.251001+01:00 frans sshd[1026489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.154.3 user=root 2025-09-22T05:47:26.175009+01:00 frans sshd[1026489]: Failed password for root from 159.65.154.3 port 52870 ssh2 2025-09-22T05:49:05.106913+01:00 frans sshd[1074105]: Invalid user vagrant from 159.65.154.3 port 34836 ... show less	Brute-Force SSH

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.89.109

🇨🇳 202.108.14.226

🇬🇧 85.234.131.81

🇺🇸 50.84.211.204

🇵🇱 2400:cb00:923:1000:e64a:1f2f:1eb5:95c9

🇦🇱 193.187.102.157

🇵🇱 172.68.159.161

🇺🇸 100.1.126.36

🇫🇷 85.217.140.42

🇧🇬 79.124.58.110

🇳🇱 77.67.26.251

🇯🇵 47.74.26.96

🇫🇮 35.228.199.65

🇩🇪 213.209.159.239

🇸🇬 165.232.174.98

🇺🇸 165.154.255.63

🇧🇩 103.41.244.244

🇺🇸 72.205.170.19

🇳🇱 45.148.10.152

🇭🇰 43.155.32.18