JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.65.31.94

Activity Trending Down

Abuse Confidence Score

30% Elevated

96 reports

70 reporters · latest 1 week ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇬🇧 United Kingdom of Great Britain and Northern Ireland
City: London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

96 from 70 distinct reporters

First reported

March 11th 2025

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇬🇧 United Kingdom of Great Britain and Northern Ireland 2 🇩🇪 Germany 1 🇸🇪 Sweden 1

Most common categories Port Scan 4 Hacking 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Admins@FBN	2026-10-27 01:56:50 UTC · (1 week ago)	FW-PortScan: Traffic Blocked srcport=61015 dstport=3443	Port Scan
Anonymous	2026-10-27 01:22:36 UTC · (1 week ago)	Drop from IP address 159.65.31.94 to tcp-port 8808	Port Scan
🇺🇸 donarev419	2026-10-27 00:58:19 UTC · (1 week ago)	Connection to port 6789 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20	Port Scan Hacking
🇬🇧 sonot	2026-10-27 00:54:59 UTC · (1 week ago)	Blocked by UFW on tunneluk01 [1244/tcp] \| SPT: 61013 \| TTL: 244 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
Anonymous	2026-10-27 00:06:19 UTC · (1 week ago)	unsolicited connect TCP dport 80 (sport 61001)	Hacking
🇫🇷 masterguru	2026-05-21 12:24:32 UTC · (5 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.65.31.94 (GB/United Kingdom/-): 1 in the last 3600 secs (0-197)	Hacking
🇦🇹 Starburst SysOp Team	2026-05-19 18:35:25 UTC · (5 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-ams6-1)	Hacking Bad Web Bot
Anonymous	2026-05-19 18:10:55 UTC · (5 months ago)	2026-05-19T19:10:54.254092+01:00 vps kernel: [40954435.514212] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=159.65.31.94 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=52090 PROTO=TCP SPT=61012 DPT=1337 WI ... show more 2026-05-19T19:10:54.254092+01:00 vps kernel: [40954435.514212] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=159.65.31.94 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=52090 PROTO=TCP SPT=61012 DPT=1337 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 RAP	2026-05-11 03:54:58 UTC · (5 months ago)	2026-05-11 03:54:58 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇩🇰 swrlly	2026-03-02 06:02:52 UTC · (8 months ago)	3 ssh bruteforce attempts (30d)	Brute-Force SSH
🇫🇷 antivirus_5846	2026-03-02 06:00:49 UTC · (8 months ago)	Mar 2 06:59:42 hestiacp-tunnel-ip sshd[2017157]: Failed password for root from 159.65.31.94 port 40632 ssh2 Mar 2 07:00:12 hestiacp-tunnel-ip sshd[2017558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159 ... show more Mar 2 06:59:42 hestiacp-tunnel-ip sshd[2017157]: Failed password for root from 159.65.31.94 port 40632 ssh2 Mar 2 07:00:12 hestiacp-tunnel-ip sshd[2017558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.31.94 user=root Mar 2 07:00:14 hestiacp-tunnel-ip sshd[2017558]: Failed password for root from 159.65.31.94 port 43600 ssh2 Mar 2 07:00:46 hestiacp-tunnel-ip sshd[2017705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.31.94 user=root Mar 2 07:00:48 hestiacp-tunnel-ip sshd[2017705]: Failed password for root from 159.65.31.94 port 59516 ssh2 ... show less	Brute-Force SSH
🇩🇪 syndications4radio.de	2026-03-02 06:00:43 UTC · (8 months ago)	2026-03-02T06:59:37.515511+01:00 v2202403218999259734 sshd[1687410]: Failed password for root from 159.65.31.94 port 54580 ssh2 2026-03-02T07:00:07.229985+01:00 v2202403218999259734 sshd[1687558]: pam_unix(sshd:auth): authentication failure; logname= ... show more 2026-03-02T06:59:37.515511+01:00 v2202403218999259734 sshd[1687410]: Failed password for root from 159.65.31.94 port 54580 ssh2 2026-03-02T07:00:07.229985+01:00 v2202403218999259734 sshd[1687558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.31.94 user=root 2026-03-02T07:00:09.099718+01:00 v2202403218999259734 sshd[1687558]: Failed password for root from 159.65.31.94 port 33402 ssh2 2026-03-02T07:00:40.744188+01:00 v2202403218999259734 sshd[1687710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.31.94 user=root 2026-03-02T07:00:43.145591+01:00 v2202403218999259734 sshd[1687710]: Failed password for root from 159.65.31.94 port 36900 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-03-02 05:58:16 UTC · (8 months ago)	2026-03-02T06:57:46.367807 web.evocoach.se sshd-session[829688]: Failed password for root from 159.65.31.94 port 56564 ssh2 2026-03-02T06:58:14.349571 web.evocoach.se sshd-session[829698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more 2026-03-02T06:57:46.367807 web.evocoach.se sshd-session[829688]: Failed password for root from 159.65.31.94 port 56564 ssh2 2026-03-02T06:58:14.349571 web.evocoach.se sshd-session[829698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.31.94 user=root 2026-03-02T06:58:16.040188 web.evocoach.se sshd-session[829698]: Failed password for root from 159.65.31.94 port 34102 ssh2 ... show less	Brute-Force SSH
🇩🇰 swrlly	2026-03-02 05:47:48 UTC · (8 months ago)	2 ssh bruteforce attempts (30d)	Brute-Force SSH
🇨🇿 lp	2026-03-02 05:39:59 UTC · (8 months ago)	SSH Brute force: 11 attempts were recorded from 159.65.31.94 2026-03-02T06:33:26+01:00 Connection from 159.65.31.94 port 46672 on <redacted> port 22 rdomain "" 2026-03-02T06:33:26+01:00 User root from 159.65.31.94 not allowed because not listed in Al ... show more SSH Brute force: 11 attempts were recorded from 159.65.31.94 2026-03-02T06:33:26+01:00 Connection from 159.65.31.94 port 46672 on <redacted> port 22 rdomain "" 2026-03-02T06:33:26+01:00 User root from 159.65.31.94 not allowed because not listed in AllowUsers 2026-03-02T06:33:28+01:00 Failed password for invalid user root from 159.65.31.94 port 46672 ssh2 2026-03-02T06:33:29+01:00 Connection closed by invalid user root 159.65.31.94 port 46672 [preauth] 2026-03-02T06:34:04+01:00 Connection from 159.65.31.94 port 49162 on <redacted> port 22 rdomain "" 2026-03-02T06:34:04+01:00 User root from 159.65.31.94 not allowed because not listed in AllowUsers 2026-03-02T06:34:06+01:00 Failed password for invalid user root from 159.65.31.94 port 49162 ssh2 2026-03-02T06:34:07+01:00 Connection closed by invalid user root 159.65.31.94 port 49162 [preauth] 2026-03-02T06:39:16+01:00 Connection from 159.65. show less	Brute-Force SSH

Showing 1 to 15 of 96 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 198.235.24.97

🇳🇱 193.42.111.190

🇫🇷 141.101.69.14

🇳🇱 109.160.32.114

🇳🇱 103.47.145.66

🇬🇧 101.36.97.74

🇷🇴 92.118.39.14

🇹🇼 61.222.211.114

🇧🇪 34.52.152.34

🇺🇸 23.185.200.28

🇺🇸 20.38.35.148

🇳🇱 193.176.31.249

🇳🇱 109.160.32.151

🇩🇰 95.101.195.162

🇺🇸 66.132.186.254

🇵🇱 195.3.220.7

🇷🇴 92.118.39.77

🇪🇸 80.102.206.172

🇵🇱 46.149.219.99

🇻🇳 42.117.100.174