159.65.245.125
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Clifton, New Jersey
Abuse Reports
Total reports
12 from
11 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 hiiruki |
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/1.1 (POST) | Endpoint: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇵🇱 arcy |
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-probing. 1 matching log event at 2026-11-08T07:19:19Z (UTC). Sample requests: GET /wp-json/batch/v1 -> 404
|
Hacking Web App Attack | |
| 🇩🇪 raph |
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
|
Bad Web Bot Web App Attack | |
| 🇫🇷 masterguru |
(wordpress) Apache: Failed WordPress login from 159.65.245.125 (US/United States/-): 10 in the last 3600 secs (0-193)
|
Hacking | |
| 🇳🇱 Roderic |
Insights: 9 probe requests within 24 hours on 1 site, e.g. /wp-login.php (no normal page views)
|
Web App Attack | |
| 🇧🇪 Saec |
Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.me)
|
Port Scan Web App Attack | |
| 🇩🇪 EGP Abuse Dept |
Scanning for web/db/file exploits on www.peterkuiper.nl
|
SQL Injection Bad Web Bot Web App Attack | |
| 🇵🇱 Budyn |
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: idp.goblinpot.store | Path: /wp-login.php | User-Agent: Mozilla/5.0 | Request: [Empty / GET Request]
|
Bad Web Bot Web App Attack | |
| Anonymous |
Reported by internal abuse tracking
|
DDoS Attack Web App Attack | |
| 🇺🇸 MPL |
tcp/8882
|
Port Scan | |
| 🇺🇸 MPL |
tcp/3443
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 5432.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown