JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.165.169

159.65.165.169 was found in our database!

This IP was reported 267 times. Confidence of Abuse is 30%: ?

30%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.65.165.169

Whois 159.65.165.169

IP Abuse Reports for 159.65.165.169:

This IP address has been reported a total of 267 times from 97 distinct sources. 159.65.165.169 was first reported on January 1st 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 pengpeng	2026-05-09 03:43:34 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 17290 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 17290 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-05-07 20:49:52 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 15813 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 15813 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇸 Scan	2026-05-07 00:56:35 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Smel	2026-05-07 00:52:02 (1 month ago)	SIP/5060 Probe, Scan, BF, Hack -	Fraud VoIP Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-05-06 20:38:49 (1 month ago)	tcp/18789	Port Scan
🇬🇧 gbzret4d	2026-04-27 20:16:40 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 11470 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 11470 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 11470 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-04-27 07:16:35 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 11249 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 11249 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 11249 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-04-26 20:58:38 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 11085 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 11085 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 11085 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-04-26 11:22:40 (1 month ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 10942 [1] TCP	Port Scan
🇺🇸 2MP	2026-04-25 19:07:37 (1 month ago)	Honeypot [gcp-tpot]: HTTP/1.1 request on 4931 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64 ... show more Honeypot [gcp-tpot]: HTTP/1.1 request on 4931 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 4931 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇫🇮 nNordic	2026-04-25 08:43:50 (1 month ago)	Connection attempt blocked by IDS/IPS from 159.65.165.169/32	Hacking
🇬🇧 gbzret4d	2026-04-25 00:45:36 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 10421 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 10421 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 10421 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 NXTwoThou	2026-04-24 15:49:34 (1 month ago)	Verb	Web App Attack
🇬🇧 gbzret4d	2026-04-24 13:09:38 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 10231 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 10231 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 10231 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 PeravixGroup	2026-04-24 09:45:20 (1 month ago)	HoneyPot hit - Aaran.cloud \| Rce Attempt \| command injection \| [TLS Handshake/SNI Probe] 0=6cc6tXDy ... show more HoneyPot hit - Aaran.cloud \| Rce Attempt \| command injection \| [TLS Handshake/SNI Probe] 0=6cc6tXDy <6P Lk; B=` n+/,0 E + 3M1A@F!?{(xbz\Xv38dE1Ru>J5 \ kyBw9oa'gW9? show less	IoT Targeted

Showing 1 to 15 of 267 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 35.228.67.103

🇮🇳 182.71.135.110

🇺🇸 151.240.103.8

🇲🇲 103.233.206.154

🇵🇭 58.69.56.44

🇮🇳 49.37.113.82

🇳🇱 45.116.104.33

🇺🇸 45.79.214.23

🇰🇷 40.82.128.123

🇬🇧 35.203.210.215

🇨🇳 180.165.18.241

🇭🇰 172.253.5.30

🇩🇪 167.94.145.27

🇩🇪 152.53.22.186

🇩🇪 64.89.163.173

🇩🇪 213.209.159.158

🇩🇪 209.50.183.8

🇧🇷 200.196.50.91

🇲🇽 186.96.145.241

🇨🇳 124.70.140.201