JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.65.5.169

159.65.5.169 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 47%: ?

47%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.65.5.169

Whois 159.65.5.169

IP Abuse Reports for 159.65.5.169:

This IP address has been reported a total of 86 times from 45 distinct sources. 159.65.5.169 was first reported on September 21st 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 administrator	2026-06-03 22:03:41 (3 days ago)	2026-06-04 00:02:12,900 fail2ban.actions [1438594]: NOTICE [apache-noscript] Ban 159.65.5.16 ... show more 2026-06-04 00:02:12,900 fail2ban.actions [1438594]: NOTICE [apache-noscript] Ban 159.65.5.169 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇸🇮 administrator	2026-05-31 22:04:17 (6 days ago)	2026-06-01 00:02:32,024 fail2ban.actions [47625]: NOTICE [apache-noscript] Ban 159.65.5.169 ... show more 2026-06-01 00:02:32,024 fail2ban.actions [47625]: NOTICE [apache-noscript] Ban 159.65.5.169 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇸🇮 administrator	2026-05-30 11:56:33 (1 week ago)	2026-05-26 00:01:44,546 fail2ban.actions [1070]: NOTICE [apache-noscript] Ban 159.65.5.169 . ... show more 2026-05-26 00:01:44,546 fail2ban.actions [1070]: NOTICE [apache-noscript] Ban 159.65.5.169 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇸🇮 administrator	2026-05-22 22:14:03 (2 weeks ago)	2026-05-18 00:02:16,960 fail2ban.actions [1088]: NOTICE [apache-noscript] Ban 159.65.5.169 2 ... show more 2026-05-18 00:02:16,960 fail2ban.actions [1088]: NOTICE [apache-noscript] Ban 159.65.5.169 2026-05-20 00:01:31,894 fail2ban.actions [1089]: NOTICE [apache-noscript] Ban 159.65.5.169 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇸🇮 administrator	2026-05-19 22:09:58 (2 weeks ago)	2026-05-18 00:02:16,960 fail2ban.actions [1088]: NOTICE [apache-noscript] Ban 159.65.5.169 2 ... show more 2026-05-18 00:02:16,960 fail2ban.actions [1088]: NOTICE [apache-noscript] Ban 159.65.5.169 2026-05-20 00:01:31,894 fail2ban.actions [1089]: NOTICE [apache-noscript] Ban 159.65.5.169 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-05-18 23:21:59 (2 weeks ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/159.65.5.169 2026 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/159.65.5.169 2026-05-18 05:34:41 //www.dci.gov.pg:443 2026-05-18 05:04:45 //www.dci.gov.pg:443 2026-05-18 04:50:06 //coimbrademattos.com:443:443 2026-05-18 05:27:17 //opac.setiabudi.ac.id:443 2026-05-18 05:59:12 //opac.setiabudi.ac.id:443 2026-05-18 05:19:57 //opac.setiabudi.ac.id:443 2026-05-18 04:18:51 //opac.setiabudi.ac.id:443 2026-05-18 04:25:16 //opac.setiabudi.ac.id:443 2026-05-18 00:02:21 //opac.setiabudi.ac.id:443 2026-05-18 05:37:06 //coimbrademattos.com:443:443 show less	Web App Attack
🇺🇸 xmission.com	2026-05-18 09:47:20 (2 weeks ago)	Blocked by UFW (TCP on 8118) Source port: 40652 TTL: 46 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8118) Source port: 40652 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 159.65.5.169) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Rayulcifer	2026-05-18 00:19:43 (2 weeks ago)	159.65.5.169 - - [17/May/2026:19:18:41 -0500] "CONNECT coimbrademattos.com:443:443 HTTP/1.1" 400 392 ... show more 159.65.5.169 - - [17/May/2026:19:18:41 -0500] "CONNECT coimbrademattos.com:443:443 HTTP/1.1" 400 392 "-" "-" 159.65.5.169 - - [17/May/2026:19:19:39 -0500] "CONNECT www.dci.gov.pg:443 HTTP/1.1" 502 488 "-" "-" 159.65.5.169 - - [17/May/2026:19:19:39 -0500] "\x16\x03\x01" 400 392 "-" "-" 159.65.5.169 - - [17/May/2026:19:19:42 -0500] "CONNECT www.dci.gov.pg:443 HTTP/1.1" 502 488 "-" "-" 159.65.5.169 - - [17/May/2026:19:19:42 -0500] "\x16\x03\x01" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇨🇿 Countryman	2026-05-18 00:01:43 (2 weeks ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇨🇳 ThreatBook.io	2026-05-17 23:25:54 (2 weeks ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/159.65.5.169 2026 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/159.65.5.169 2026-05-17 00:08:21 //premieroftn.com:443 2026-05-17 00:15:59 //satpolpp.kamparkab.go.id:443:443 2026-05-17 00:55:52 //bijuzeyn.com:443:443 2026-05-17 01:17:17 //fidson.com:443:443 2026-05-17 00:05:03 //mar.ulpgc.es:443:443 2026-05-17 00:09:58 //premieroftn.com:443 2026-05-17 01:06:42 //bernhotelspanama.com:443:443 2026-05-17 01:07:13 //opac.setiabudi.ac.id:443 2026-05-17 01:12:52 //premieroftn.com:443 2026-05-17 00:52:26 //bernhotelspanama.com:443:443 show less	Web App Attack
🇨🇿 Countryman	2026-05-17 21:44:26 (2 weeks ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇯🇵 SentinalX by uzumaru	2026-05-17 20:12:20 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.dci.gov.pg:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-05-17 14:53:31 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: opac.setiabudi.ac.id:443 show less	Open Proxy Port Scan
🇺🇸 xmission.com	2026-05-17 11:25:59 (3 weeks ago)	Blocked by UFW (TCP on 8118) Source port: 43214 TTL: 47 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8118) Source port: 43214 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 159.65.5.169) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-16 23:32:03 (3 weeks ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/159.65.5.169 2026 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/159.65.5.169 2026-05-16 04:21:29 //cso-ye.org:443:443 2026-05-16 04:09:12 //www.citizensclinic.com:443:443 2026-05-16 04:44:53 //bearcreekwaco.com:443:443 2026-05-16 04:02:13 //mar.ulpgc.es:443:443 2026-05-16 04:18:15 //www.citizensclinic.com:443:443 2026-05-16 04:38:26 //mar.ulpgc.es:443:443 2026-05-16 04:07:26 //bijuzeyn.com:443:443 2026-05-16 04:35:54 //opac.setiabudi.ac.id:443 2026-05-16 04:46:21 //opac.setiabudi.ac.id:443 2026-05-16 04:50:41 //opac.setiabudi.ac.id:443 show less	Web App Attack

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 2a05:d018:10df:d400:49b7:7e63:71a4:98a3

🇰🇷 211.178.247.182

🇨🇳 183.238.181.202

🇳🇱 45.148.10.152

🇮🇳 20.193.141.133

🇨🇳 220.197.78.2

🇨🇳 182.242.168.36

🇪🇨 181.78.242.131

🇮🇳 122.187.229.218

🇸🇬 118.194.234.8

🇺🇸 72.10.32.138

🇩🇪 47.254.170.228

🇺🇸 20.14.81.42

🇷🇺 213.180.203.10

🇪🇨 186.178.65.97

🇫🇷 173.212.213.201

🇨🇳 171.37.47.213

🇧🇼 168.167.228.123

🇲🇴 125.31.2.160

🇻🇳 113.176.87.118