159.65.202.21

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
7% Caution
18 reports
17 reporters · latest 1 month ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇭 Switzerland 1 🇫🇮 Finland 1
Most common categories Port Scan 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇮 mikkopal88
TCP SYN port scan to database or remote admin port
Port Scan
🇨🇭 pingusurmars
Blocked by UFW on amperetwo [31337/tcp] Source port: 61002 TTL: 245 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇹🇷 Threat.live
Suspicious Connection Attempts
Brute-Force
🇺🇸 LockBlock
2026-05-25 21:10:42: Port scan detected from 159.65.202.21 on port 110 of racknerd-e7e1a9
Port Scan
🇫🇷 masterguru
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.65.202.21 (NL/The Netherlands/-): 2 in the last 3600 secs (0-193)
Hacking
🇳🇱 ATV
Unsolicited connection attempts to ports 1723, 22, 3000, 443, 4567, 5000, 5001, 5555, 60001, 7547, 7676, 80, 8000, 8081, 81, 8181, 8443, 85, 88, 8888
Hacking SSH
🇫🇷 oonux.net
RouterOS: Scanning detected TCP 159.65.202.21:61008 > x.x.x.x:8081
Port Scan
🇺🇸 BSG Webmaster
Port scanning (Port 8082)
Port Scan Hacking
🇺🇸 sumnone
Port probing on unauthorized port 12000
Port Scan Hacking Exploited Host
🇫🇷 Altai
Blocked by UFW on Pterodactyl [27017/tcp] Source port: 61000 TTL: 244 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp/1177 (2 or more attempts)
Port Scan
🇧🇷 diego
Events: TCP SYN Discovery or Flooding, Seen 4 times in the last 10800 seconds
DDoS Attack
🇺🇸 octageeks.com
Wordpress malicious attack:[octa404]
Web App Attack
🇧🇷 diego
[probe-166-249] 2025-01-21 14:55:33, Client: 159.65.202.21:59170, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 104.28.222.47
🇺🇸 67.205.156.9
🇫🇷 51.68.34.180
🇺🇸 45.132.184.118
🇿🇦 40.123.240.128
🇸🇪 13.48.193.27
🇮🇷 213.207.249.4
🇹🇼 210.242.156.227
🇰🇷 210.103.45.239
🇦🇺 210.0.90.82
🇺🇸 207.254.40.89
🇺🇸 206.81.6.238
🇳🇵 182.54.156.142
🇺🇸 107.167.122.23
🇵🇸 82.205.66.16
🇬🇧 45.133.173.119
feedback