JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.178.207

159.65.178.207 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.65.178.207

Whois 159.65.178.207

IP Abuse Reports for 159.65.178.207:

This IP address has been reported a total of 124 times from 89 distinct sources. 159.65.178.207 was first reported on November 30th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-09 21:59:46 (1 week ago)	Auto-ban: >3000 req/min op 2026-08-09	Web App Attack SSH Hacking
🇷🇺 Andrey Ganichvili	2026-08-09 17:09:40 (1 week ago)	Unauthorized sitemap access (/sitemap.xml) from 159.65.178.207	Web App Attack
🇫🇷 cityhunter_rhone	2026-08-09 06:06:06 (1 week ago)	Fail2Ban offender in jail [recidive] — 3 total attempts — tracked by mercurius-guide.com security sy ... show more Fail2Ban offender in jail [recidive] — 3 total attempts — tracked by mercurius-guide.com security system. show less	SSH Brute-Force
🇫🇮 as211431.net	2026-08-09 04:58:10 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /config.js UA: CCBot/2.0 (https://commoncrawl.org/faq/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 AWW-Admin	2026-08-09 04:40:37 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 159.65.178.207 (US/United States/-)	SQL Injection
🇨🇭 4server	2026-08-09 04:28:09 (1 week ago)	[SunAug0906:28:06.0359622026][security2:error][pid1696820:tid1697054][client159.65.178.207:0]ModSecu ... show more [SunAug0906:28:06.0359622026][security2:error][pid1696820:tid1697054][client159.65.178.207:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mail.benvenutialfood.biz\"][uri\"/.git/HEAD\"][unique_id\"angB1pun9c0haTqUqobcggAAAQA\"] show less	Hacking Web App Attack
🇳🇱 tr1n	2026-08-09 03:08:02 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 14061 (DigitalOc ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| ASN: 14061 (DigitalOcean, LLC) \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| Timestamp: 2026-08-09T03:08:02Z \| UA: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) show less	Bad Web Bot
🇩🇪 maxpower	2026-08-09 01:42:28 (1 week ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 159.65.178.207 (US/United States/-): 1 i ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 159.65.178.207 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 159.65.178.207 - - [09/Aug/2026:03:42:25 +0200] "GET /secrets.json HTTP/2.0" 404 201 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "159.65.178.207" host=ipv6.conapipescara.it show less	Port Scan
Anonymous	2026-08-09 01:16:49 (1 week ago)	scanning for potential vulnerable apps (wordpress etc.) and database accesses (ISR). Requested URI: ... show more scanning for potential vulnerable apps (wordpress etc.) and database accesses (ISR). Requested URI: /.git/config show less	Web App Attack
🇳🇿 Antinson	2026-08-09 00:48:23 (1 week ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
Anonymous	2026-08-08 23:33:24 (1 week ago)	CrowdSec ban: crowdsecurity/http-sensitive-files	Port Scan
🇩🇪 Hary74656	2026-08-08 23:10:20 (1 week ago)	[Sun Aug 09 01:09:49.441590 2026] [security2:error] [pid 199621:tid 199699] [client 159.65.178.207:5 ... show more [Sun Aug 09 01:09:49.441590 2026] [security2:error] [pid 199621:tid 199699] [client 159.65.178.207:51490] [client 159.65.178.207] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "game.26th.eu"] [uri "/.git/config"] [unique_id "ane3PYFZBLps1Bcq_v4saQAAAEk"] [Sun Aug 09 01:09:50.251479 2026] [security2:error] [pid 200366:tid 200430] [client 159.65.178.207:51516] [client 159.65.178.207] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.git/" at REQUEST_FILENAME. [file ... show less	Web App Attack
🇺🇸 itsnixk	2026-08-08 22:59:56 (1 week ago)	(mod_security) mod_security (id:930130) triggered by 159.65.178.207 (US/United States/-): 1 in the l ... show more (mod_security) mod_security (id:930130) triggered by 159.65.178.207 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Aug 08 18:59:52.430928 2026] [security2:error] [pid 4044165:tid 4044226] [remote 159.65.178.207:0] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".git/" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/.git/config"] [unique_id "ane06HIXyf8N1VAChn3fEwAAeSs"] show less	Port Scan
🇩🇪 maxpower	2026-08-08 22:41:31 (1 week ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 159.65.178.207 (US/United States/-): 1 i ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 159.65.178.207 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 159.65.178.207 - - [09/Aug/2026:00:41:29 +0200] "GET /secrets.json HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" "159.65.178.207" host=focusabruzzo.eu show less	Port Scan
🇩🇪 Gwyneth Llewelyn	2026-08-08 22:20:05 (1 week ago)	2026/08/08 23:20:00 [error] 57180#57180: 168270 access forbidden by rule, client: 159.65.178.207, s ... show more 2026/08/08 23:20:00 [error] 57180#57180: 168270 access forbidden by rule, client: 159.65.178.207, server: feminina.eu, request: "GET /public/.env HTTP/2.0", host: "feminina.eu" 2026/08/08 23:20:00 [error] 57179#57179: 168268 access forbidden by rule, client: 159.65.178.207, server: feminina.eu, request: "GET /wp/.env HTTP/2.0", host: "feminina.eu" 2026/08/08 23:20:00 [error] 57176#57176: 168260 access forbidden by rule, client: 159.65.178.207, server: feminina.eu, request: "GET /backend/.env HTTP/2.0", host: "feminina.eu" show less	Brute-Force Web App Attack

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.174

🇳🇱 192.42.116.55

🇵🇱 109.205.211.110

🇷🇺 91.224.137.79

🇬🇧 35.203.211.199

🇨🇴 176.57.202.14

🇮🇱 109.186.74.107

🇷🇴 80.94.92.55

🇺🇸 162.216.149.108

🇺🇸 66.132.172.138

🇳🇱 45.148.10.151

🇺🇸 18.214.238.178

🇺🇸 2607:f8b0:400e:c05::128

🇮🇩 202.155.157.112

🇸🇷 190.98.48.2

🇲🇽 187.202.116.143

🇦🇪 176.204.245.229

🇺🇸 172.237.136.213

🇷🇺 95.105.52.153

🇺🇸 44.248.26.163