This IP address has been reported a total of
19
times from
18 distinct
sources.
159.65.17.131 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United Kingdom of Great Britain and Northern Ireland
with 7
reports;
Germany
with 1
report;
Italy
with 1
report.
The most common categories in these recent reports were:
Port Scan
7
times;
Brute-Force
3
times;
Hacking
2
times;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unauthorized attempt on (TCP on port 6606).
Source port: 61007
TTL: 244
Packet length: 44
Timestamp: ...
show moreUnauthorized attempt on (TCP on port 6606).
Source port: 61007
TTL: 244
Packet length: 44
Timestamp: 2026-10-19 00:34:48
show less
Connection to port 8082 with data transfer.
Data preview: GET / HTTP/1.1
Host: 109.110.170.76
Conn ...
show moreConnection to port 8082 with data transfer.
Data preview: GET / HTTP/1.1
Host: 109.110.170.76
Connection: keep-alive
sec-ch-ua: "Chromium";v="153", "Not:A-
show less
*Port Scan* detected from 159.65.17.131 (GB/United Kingdom/-). 11 hits in the last 211 seconds [SIGM ...
show more*Port Scan* detected from 159.65.17.131 (GB/United Kingdom/-). 11 hits in the last 211 seconds [SIGMA]
show less
[3600] *Port Scan* detected from 159.65.17.131 (GB/United Kingdom/-). 11 hits in the last 141 second ...
show more[3600] *Port Scan* detected from 159.65.17.131 (GB/United Kingdom/-). 11 hits in the last 141 seconds
show less
May 14 07:05:43 159.65.17.131 TCP SPT=53092 DPT=8888 SYN
May 14 07:06:27 159.65.17.131 TCP SPT=53092 ...
show moreMay 14 07:05:43 159.65.17.131 TCP SPT=53092 DPT=8888 SYN
May 14 07:06:27 159.65.17.131 TCP SPT=53092 DPT=8008 SYN
May 14 07:06:36 159.65.17.131 TCP SPT=53092 DPT=8088 SYN
...
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=159.65.17.131; proto=TCP; source_port=53092; target_port=3000; flags=SYN
show less
Blocked by UFW on tunneluk01 [8888/tcp]
Source port: 53092
TTL: 254
Packet length: 40
TOS: 0x00
Thi ...
show moreBlocked by UFW on tunneluk01 [8888/tcp]
Source port: 53092
TTL: 254
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
