JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.170.4

159.65.170.4

Recent Activity

114 reports found in our database

15% ▲ ▲ ▲ Caution

Abuse confidence score ?

ISP

DigitalOcean, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14061

Domain Name

digitalocean.com

Country

🇺🇸 United States of America

City

Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 159.65.170.4:

This IP address has been reported a total of 114 times from 74 distinct sources. 159.65.170.4 was first reported on October 27th 2025, and the most recent report was 4 days ago. In the last 60 days, the top reporter locations were: Germany with 1 report; United Kingdom of Great Britain and Northern Ireland with 1 report. The most common categories in these recent reports were: Port Scan 1 time; Web App Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-26 05:12:54 (4 days ago)	denied traffic to a non-approved destination port. destination port 1000.	Port Scan
🇬🇧 consul.to	2026-08-25 06:09:49 (4 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 Gabriel Camargo	2025-11-19 07:17:59 (9 months ago)	159.65.170.4 - - [19/Nov/2025:02:17:58 -0500] "GET /email.js HTTP/1.1" 301 178 "-" "BlackBerry8300/4 ... show more 159.65.170.4 - - [19/Nov/2025:02:17:58 -0500] "GET /email.js HTTP/1.1" 301 178 "-" "BlackBerry8300/4.2.2 Profile/MIDP-2.0 Configuration/CLDC-1.1 VendorID/107 UP.Link/6.2.3.15.0" 159.65.170.4 - - [19/Nov/2025:02:17:58 -0500] "GET /custom.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-A520F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36" 159.65.170.4 - - [19/Nov/2025:02:17:58 -0500] "GET /jquery.sticky.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36 Edg/100.0.1185.44" ... show less	Brute-Force SSH
🇬🇧 [email protected]	2025-11-05 00:40:20 (9 months ago)	...	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-10-30 20:09:39 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-10-29 20:09:38 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-10-29 07:02:09 (10 months ago)	>10 unauthorized SSH connections	Brute-Force SSH
🇮🇳 Parth Maniar	2025-10-29 04:22:33 (10 months ago)	This IP address carried out 350 port scanning attempts on 28-10-2025. For more information or to rep ... show more This IP address carried out 350 port scanning attempts on 28-10-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇹🇷 rtbh.com.tr	2025-10-29 00:09:36 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-10-28 22:33:07 (10 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/159.65.170.4	SSH
🇮🇳 Parth Maniar	2025-10-28 22:30:53 (10 months ago)	This IP address carried out 68 SSH credential attack (attempts) on 28-10-2025. For more information ... show more This IP address carried out 68 SSH credential attack (attempts) on 28-10-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-10-28 20:09:37 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2025-10-28 13:02:33 (10 months ago)	159.65.170.4 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 sec ... show more 159.65.170.4 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Oct 28 08:02:23 13160 sshd[15797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.170.4 user=root Oct 28 08:00:33 13160 sshd[15635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.218.139.165 user=root Oct 28 08:00:35 13160 sshd[15635]: Failed password for root from 185.218.139.165 port 37342 ssh2 Oct 28 08:02:04 13160 sshd[15788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.180.59.208 user=root Oct 28 08:02:06 13160 sshd[15788]: Failed password for root from 182.180.59.208 port 49860 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇬🇧 Steve	2025-10-28 12:59:57 (10 months ago)	SSH invalid-user multiple login attempts	Brute-Force SSH
🇨🇦 Tect.host	2025-10-28 12:25:14 (10 months ago)	Brute-force SSH server detected by Fail2ban	Brute-Force SSH

Showing 1 to 15 of 114 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:533:1000:27c6:cdde:8b89:620c

🇹🇭 203.113.107.61

🇵🇱 194.180.48.39

🇵🇱 176.53.159.198

🇵🇱 134.112.56.47

🇳🇱 91.92.40.24

🇫🇷 85.217.140.51

🇳🇱 45.148.10.183

🇺🇸 40.121.200.75

🇰🇷 220.77.214.59

🇩🇪 194.88.98.126

🇮🇷 185.112.150.99

🇨🇳 111.225.214.131

🇺🇸 107.150.103.210

🇧🇩 103.239.252.132

🇺🇸 45.42.191.86

🇺🇸 43.173.77.7

🇰🇿 37.208.46.130

🇫🇮 37.27.206.166

🇺🇦 31.41.68.246