JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.42.138

159.65.42.138

Neutral Activity

23 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

DigitalOcean, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14061

Domain Name

digitalocean.com

Country

🇺🇸 United States of America

City

Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.65.42.138 has been reported 23 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 159.65.42.138:

This IP address has been reported a total of 23 times from 15 distinct sources. 159.65.42.138 was first reported on October 12th 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2023-10-26 07:36:22 (2 years ago)	Trying to access /old /new /test (non existing folders)	Hacking
🇸🇪 webbfabriken	2023-10-23 19:23:58 (2 years ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
🇺🇸 mawan	2023-10-19 18:56:27 (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 expandmade.com	2023-10-17 02:57:44 (2 years ago)	trolling for installation vulnerabilities [17/Oct/2023:02:57:44 "GET /css/xmrlpc.php?p="]	Web App Attack
Anonymous	2023-10-16 16:27:12 (2 years ago)	159.65.42.138 - - [16/Oct/2023:18:27:01 +0200] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1 ... show more 159.65.42.138 - - [16/Oct/2023:18:27:01 +0200] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 5826 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.65.42.138 - - [16/Oct/2023:18:27:04 +0200] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 404 5826 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.65.42.138 - - [16/Oct/2023:18:27:07 +0200] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 404 4783 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.65.42.138 - - [16/Oct/2023:18:27:12 +0200] "GET /xmrlpc.php?p= HTTP/1.1" 404 4783 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Vers ... show less	Hacking Bad Web Bot
🇸🇪 webbfabriken	2023-10-16 14:09:38 (2 years ago)	Attack reported by Webbfabiken Security API - WFSecAPI	Brute-Force
🇩🇪 niceshops.com	2023-10-16 13:47:48 (2 years ago)	Web Attack ([16/Oct/2023:15:47:47.048] GET /cgi-bin/xmrlpc.php?p=)	Web App Attack
🇨🇭 zynex	2023-10-16 10:14:07 (2 years ago)	URL Probing: /wp-admin/images/xmrlpc.php	Web App Attack
🇸🇪 badtraffic	2023-10-15 21:32:37 (2 years ago)	SSH / postfix-dovecot / wp-admin / xmlrpc bruteforce	Brute-Force
🇧🇪 taivas.nl	2023-10-15 17:02:01 (2 years ago)	Wordpress_Attack	Web App Attack
Anonymous	2023-10-15 15:10:27 (2 years ago)	(mod_security) mod_security triggered on hostname [redacted] 159.65.42.138 (US/United States/-)	SQL Injection
🇭🇺 DumaNet	2023-10-14 22:03:00 (2 years ago)	WordPress (xmrlpc.php) attack attempts. Date: 2023 Oct 14. 13:10:55 Source IP: 159.65.42.138 Po ... show more WordPress (xmrlpc.php) attack attempts. Date: 2023 Oct 14. 13:10:55 Source IP: 159.65.42.138 Portion of the log(s): 159.65.42.138 - [14/Oct/2023:13:10:53 +0200] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 404 555 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.65.42.138 - [14/Oct/2023:13:10:53 +0200] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 404 555 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.65.42.138 - [14/Oct/2023:13:10:52 +0200] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 404 555 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.65.42.138 - [14/Oct/2023:13:10:51 +0200] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 404 555 "-" show less	Hacking Web App Attack
🇺🇸 mnsf	2023-10-14 22:02:20 (2 years ago)	Too many Status 40X (14)	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2023-10-13 22:56:30 (2 years ago)	paulshipley.id.au:443 159.65.42.138 - - [14/Oct/2023:09:55:55 +1100] "GET /.well-known/pki-validatio ... show more paulshipley.id.au:443 159.65.42.138 - - [14/Oct/2023:09:55:55 +1100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 66206 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" paulshipley.id.au:443 159.65.42.138 - - [14/Oct/2023:09:55:59 +1100] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 404 66206 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" paulshipley.id.au:443 159.65.42.138 - - [14/Oct/2023:09:56:03 +1100] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 404 66196 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" paulshipley.id.au:443 159.65.42.138 - - [14/Oct/2023:09:56:06 +1100] "GET /xmrlpc.php HTTP/1.1" 404 66179 "-" "Mozlila/5.0 (Linux; And ... show less	Web App Attack
🇺🇸 mnsf	2023-10-13 22:01:32 (2 years ago)	Too many Status 40X (42)	Brute-Force Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 216.244.228.106

🇷🇸 93.87.135.76

🇨🇿 82.99.177.51

🇺🇸 76.38.13.55

🇺🇸 66.132.172.233

🇳🇱 46.151.178.11

🇮🇩 34.128.89.102

🇰🇷 34.64.141.89

🇵🇱 194.180.49.76

🇨🇿 188.75.155.158

🇬🇧 185.216.145.186

🇧🇷 167.250.160.139

🇩🇪 167.235.22.183

🇨🇻 154.203.235.44

🇮🇳 110.224.164.29

🇭🇰 103.218.240.197

🇮🇩 103.154.137.41

🇦🇴 102.130.193.150

🇷🇴 92.118.39.77

🇬🇧 87.236.176.155