159.65.21.48

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
31 reports
30 reporters ยท latest 14 hours ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
๐Ÿ‡ฌ๐Ÿ‡ง United Kingdom of Great Britain and Northern Ireland
City
London, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
31 from 30 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ซ๐Ÿ‡ท France 7 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 7 ๐Ÿ‡ซ๐Ÿ‡ฎ Finland 3
Most common categories Port Scan 18 Hacking 9 Brute-Force 8 Web App Attack 5 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ท๐Ÿ‡ธ Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 3128) Source port: 54038 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 159.65.21.48) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท agroman93
T-Pot honeypot: 3 hits on ports [3128] (automated)
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท EvoX
๐Ÿ›ก๏ธ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 3128 GET / User-Agent: CGrab/v8.24.1-dev-throughput Accept: */*; 3128 [1] TCP
Hacking Bad Web Bot
๐Ÿ‡ซ๐Ÿ‡ฎ anycast_ac
Blocked by UFW on legacypanel [3128/tcp] | SPT: 39848 | TTL: 51 | LEN: 60 | TOS: 0x00 โ€ข Reported by: FemboyHolding LTD
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ mutebot.net
SRC=159.65.21.48, PROTO=TCP, SPT=43864, DPT=3128 SRC=159.65.21.48, PROTO=TCP, SPT=43864, DPT=3128 SRC=159.65.21.48, PROTO=TCP, SPT=43864, DPT=3128 SRC=159.65.21.48, PROTO=TCP, SPT=43864, DPT=3128 SRC=159.65.21.48, PROTO=TCP, SPT=43864, DPT=3128
Port Scan
๐Ÿ‡จ๐Ÿ‡ฟ kronos
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:256 | alerts5m:256
Port Scan
๐Ÿ‡ฆ๐Ÿ‡บ LiftUp Hosting
Honeypot hit: HTTP/1.1 request on 3128 GET / User-Agent: CGrab/v8.24.1-dev-throughput Accept: */*; 3128 [1] TCP
Hacking Bad Web Bot
๐Ÿ‡ท๐Ÿ‡ด abuse_IP_reporter
Oct 28 02:21:12 server UFW BLOCK SRC=159.65.21.48 DF PROTO=TCP SPT=38456
Port Scan
๐Ÿ‡ฌ๐Ÿ‡ง Nov
Unauthorized access attempt (tcp/3128)
Port Scan
Anonymous
Port Scan
๐Ÿ‡น๐Ÿ‡ท Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (3128/tcp) [non-standard port]
Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ EGP Abuse Dept
Unauthorized connection to proxy port 3128
Port Scan Hacking
Anonymous
Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=3128
Port Scan Hacking Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ Choice Tech LLC
Blocked by OPNsense firewall; 5 hits, proto=tcp, ports=3128
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฏ๐Ÿ‡ต 138.3.212.204
๐Ÿ‡ฆ๐Ÿ‡ท 181.45.132.115
๐Ÿ‡จ๐Ÿ‡ณ 120.224.15.67
๐Ÿ‡ฎ๐Ÿ‡ณ 103.117.180.117
๐Ÿ‡ฟ๐Ÿ‡ฆ 41.56.207.177
๐Ÿ‡บ๐Ÿ‡ธ 20.150.194.158
๐Ÿ‡ณ๐Ÿ‡ฑ 195.160.223.116
๐Ÿ‡ณ๐Ÿ‡ฑ 185.136.15.81
๐Ÿ‡ฐ๐Ÿ‡ท 175.209.156.146
๐Ÿ‡บ๐Ÿ‡ธ 134.33.67.95
๐Ÿ‡ฉ๐Ÿ‡ช 109.160.32.175
๐Ÿ‡ต๐Ÿ‡น 89.180.54.146
๐Ÿ‡ฎ๐Ÿ‡ณ 61.246.239.15
๐Ÿ‡ฎ๐Ÿ‡ณ 1.39.152.80
๐Ÿ‡ซ๐Ÿ‡ท 2a02:c207:2255:1862::1
๐Ÿ‡ป๐Ÿ‡ช 200.8.228.57
๐Ÿ‡บ๐Ÿ‡ธ 194.54.144.83
๐Ÿ‡บ๐Ÿ‡ธ 194.54.144.81
๐Ÿ‡จ๐Ÿ‡ณ 180.173.122.111
๐Ÿ‡จ๐Ÿ‡ณ 163.142.4.147