JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.181.8

159.65.181.8 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.65.181.8

Whois 159.65.181.8

IP Abuse Reports for 159.65.181.8:

This IP address has been reported a total of 45 times from 23 distinct sources. 159.65.181.8 was first reported on November 9th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2025-11-12 22:59:17 (7 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-11. show less	Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2025-11-12 20:09:52 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2025-11-12 06:13:09 (7 months ago)	6 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇳🇱 jjnxpct	2025-11-12 04:45:36 (7 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config] show less	Hacking Web App Attack
🇬🇧 [email protected]	2025-11-12 00:46:03 (7 months ago)	...	Brute-Force SSH
🇳🇱 homeshowdomain.nl	2025-11-11 22:59:37 (7 months ago)	Auto-ban: >3000 req/min op 2025-11-11	Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2025-11-11 20:09:51 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 jaapeldoorn	2025-11-11 16:39:48 (7 months ago)	[Tue Nov 11 13:48:02.785930 2025] [authz_core:error] [pid 1525934:tid 1525981] [client 159.65.181.8: ... show more [Tue Nov 11 13:48:02.785930 2025] [authz_core:error] [pid 1525934:tid 1525981] [client 159.65.181.8:51546] AH01630: client denied by server configuration: /var/www [Tue Nov 11 16:03:15.824859 2025] [authz_core:error] [pid 1525934:tid 1525982] [client 159.65.181.8:33938] AH01630: client denied by server configuration: /var/www [Tue Nov 11 17:39:47.240733 2025] [authz_core:error] [pid 1525934:tid 1525984] [client 159.65.181.8:49340] AH01630: client denied by server configuration: /var/www ... show less	Brute-Force
Anonymous	2025-11-11 16:30:42 (7 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2025-11-11 16:15:08 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 159.65.181.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 159.65.181.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 11:14:59.872282 2025] [security2:error] [pid 9226:tid 9226] [client 159.65.181.8:42660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "versahealthcare.com"] [uri "/.git/config"] [unique_id "aRNhA6eJVihc9TTrcY1-YwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-11 15:53:33 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 159.65.181.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 159.65.181.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 10:53:27.913178 2025] [security2:error] [pid 21884:tid 21884] [client 159.65.181.8:33154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virginiatouchatruck.com"] [uri "/.git/config"] [unique_id "aRNb9_wTUAsN6-23h46qagAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 Asimar	2025-11-11 15:11:24 (7 months ago)	(PERMBLOCK) 159.65.181.8 (US/United States/-) has had more than 2 temp blocks	Hacking
🇬🇧 Swiptly	2025-11-11 13:59:24 (7 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇫🇷 Little Iguana	2025-11-11 13:54:12 (7 months ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
🇺🇸 TPI-Abuse	2025-11-11 12:56:13 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 159.65.181.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 159.65.181.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 07:56:09.136852 2025] [security2:error] [pid 32083:tid 32083] [client 159.65.181.8:50822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vintagewet.com"] [uri "/.git/config"] [unique_id "aRMyaW5wUXAImIkrHac-awAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇿 41.104.121.17

🇺🇸 20.51.244.151

🇨🇳 14.103.109.71

🇧🇴 190.129.122.185

🇩🇪 185.242.3.195

🇹🇭 165.154.51.27

🇻🇳 103.78.1.33

🇭🇷 95.168.105.38

🇵🇱 83.168.89.49

🇪🇸 79.116.219.3

🇳🇱 45.148.10.147

🇬🇧 35.203.211.28

🇺🇦 104.28.255.120

🇳🇱 86.54.31.38

🇩🇪 84.32.10.200

🇧🇿 45.227.254.152

🇧🇷 45.205.1.5

🇨🇱 200.126.105.149

🇳🇱 176.65.139.222

🇺🇸 162.216.149.192