JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.65.170.241

Neutral Activity

Abuse Confidence Score

0% Low Risk

29 reports

20 reporters · latest 11 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.65.170.241 has been reported 29 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

29 from 20 distinct reporters

First reported

November 12th 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 [email protected]	2025-11-14 00:46:53 UTC · (11 months ago)	...	Brute-Force SSH
🇳🇱 homeshowdomain.nl	2025-11-13 22:59:10 UTC · (11 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-12.	Hacking Web App Attack SSH
🇬🇧 openstrike.co.uk	2025-11-13 06:14:07 UTC · (11 months ago)	10 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇳🇱 jjnxpct	2025-11-13 04:46:37 UTC · (11 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config]	Hacking Web App Attack
Anonymous	2025-11-12 16:30:42 UTC · (11 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇫🇷 ecode hosting	2025-11-12 15:58:06 UTC · (11 months ago)	Domain : ohsetraining.com Rule : config 2025-11-12 15:55:19 10.100.1.20 GET /.git/config - 80 - 159.65.170.241 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 - ohsetraining.com 404 8 ... show more Domain : ohsetraining.com Rule : config 2025-11-12 15:55:19 10.100.1.20 GET /.git/config - 80 - 159.65.170.241 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 - ohsetraining.com 404 8 0 231 241 1587 - - show less	Hacking SQL Injection
🇫🇷 ecode hosting	2025-11-12 15:08:04 UTC · (11 months ago)	Domain : ohsetraining.com Rule : config 2025-11-12 15:05:53 10.100.1.20 GET /.git/config - 443 - 159.65.170.241 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 - ohsetraining.com 404 ... show more Domain : ohsetraining.com Rule : config 2025-11-12 15:05:53 10.100.1.20 GET /.git/config - 443 - 159.65.170.241 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 - ohsetraining.com 404 8 0 253 241 217 - - show less	Hacking SQL Injection
🇺🇸 mashamal	2025-11-12 14:33:40 UTC · (11 months ago)	Vulnerability Probe ...	Web App Attack
🇮🇹 main.ows	2025-11-12 09:23:44 UTC · (11 months ago)	[12/Nov/2025:10:23:44.155838 +0100] aRRSH9a_KxE8ZD64hf0dIAAAAFU 159.65.170.241 40934 217.61.13.167 7081 ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 08:12:14 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 159.65.170.241 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 03:12:07.400932 2025] [security2:error] [pid 24131:tid 24131] [client 159.65.170.241:53930] ... show more (mod_security) mod_security (id:210492) triggered by 159.65.170.241 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 03:12:07.400932 2025] [security2:error] [pid 24131:tid 24131] [client 159.65.170.241:53930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "otrantocapital.com"] [uri "/.git/config"] [unique_id "aRRBV4sNGZQ6pfTf4SjzaQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-11-12 08:05:10 UTC · (11 months ago)	Too many Status 40X (13)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 07:31:11 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 159.65.170.241 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 02:31:03.652228 2025] [security2:error] [pid 12845:tid 12871] [client 159.65.170.241:59348] ... show more (mod_security) mod_security (id:210492) triggered by 159.65.170.241 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 02:31:03.652228 2025] [security2:error] [pid 12845:tid 12871] [client 159.65.170.241:59348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ogier.us"] [uri "/.git/config"] [unique_id "aRQ3t_-8l_YPtVPdU5No1QAAANc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 06:52:48 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 159.65.170.241 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 01:52:44.550601 2025] [security2:error] [pid 15337:tid 15337] [client 159.65.170.241:44166] ... show more (mod_security) mod_security (id:210492) triggered by 159.65.170.241 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 01:52:44.550601 2025] [security2:error] [pid 15337:tid 15337] [client 159.65.170.241:44166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "operationsresearch-management.science"] [uri "/.git/config"] [unique_id "aRQuvFwXkCI-CDIWTVzptQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 05:42:17 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 159.65.170.241 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 00:42:10.833887 2025] [security2:error] [pid 546:tid 675] [client 159.65.170.241:55360] Mod ... show more (mod_security) mod_security (id:210492) triggered by 159.65.170.241 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 00:42:10.833887 2025] [security2:error] [pid 546:tid 675] [client 159.65.170.241:55360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ouye.net"] [uri "/.git/config"] [unique_id "aRQeMvYoveuJFukQV4a3NAAAAYY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 05:25:17 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 159.65.170.241 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 00:25:11.736682 2025] [security2:error] [pid 30712:tid 30712] [client 159.65.170.241:37414] ... show more (mod_security) mod_security (id:210492) triggered by 159.65.170.241 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 00:25:11.736682 2025] [security2:error] [pid 30712:tid 30712] [client 159.65.170.241:37414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "otcda-ts.com"] [uri "/.git/config"] [unique_id "aRQaN6qv2K0iz-LyD9TraAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 203.34.153.83

🇷🇴 193.226.17.157

🇺🇦 176.111.51.250

🇺🇸 67.167.41.67

🇧🇷 200.174.115.18

🇺🇸 165.154.182.182

🇺🇸 156.244.155.126

🇨🇳 123.183.190.98

🇰🇪 102.210.148.41

🇷🇺 95.188.91.101

🇳🇱 93.123.109.6

🇺🇸 66.132.195.78

🇺🇸 45.206.90.217

🇺🇸 18.117.236.183

🇨🇳 222.210.35.197

🇺🇸 216.80.22.38

🇰🇷 211.193.253.5

🇮🇳 117.192.164.96

🇸🇬 89.106.14.34

🇳🇱 77.67.26.23