JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.65.52.209

Recent Activity

Abuse confidence score ?

97% Critical

17 reports

17 reporters · latest 1 day ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 159.65.52.209

Export CSV

This IP address has been reported a total of 17 times from 17 distinct sources. 159.65.52.209 was first reported on October 9th 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: France with 4 reports; Germany with 3 reports; Canada with 2 reports. The most common categories in these recent reports were: Port Scan 13 times; Hacking 3 times; Web App Attack 2 times; Open Proxy 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 RoboSOC	2026-10-09 22:34:31 (1 day ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
Anonymous	2026-10-09 18:31:43 (2 days ago)	Repeated inbound connection attempts blocked by firewall. Observed at least twice within 24 hours.	Hacking
🇧🇷 chronos	2026-10-09 18:24:11 (2 days ago)	Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 1080 \| Proto: TCP \| Locat ... show more Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 1080 \| Proto: TCP \| Location: United Kingdom, Slough show less	Port Scan Hacking
🇨🇦 Slackin' Jack	2026-10-09 18:17:43 (2 days ago)	Triggered honeypot on port 1080. (159.65.52.209)	Port Scan
🇫🇷 sthoyer.de	2026-10-09 18:04:17 (2 days ago)	Oct 9 20:04:11 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Oct 9 20:04:11 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=159.65.52.209 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=15646 DF PROTO=TCP SPT=48726 DPT=1080 WINDOW=64240 RES=0x00 SYN URGP=0 Oct 9 20:04:12 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=159.65.52.209 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=15647 DF PROTO=TCP SPT=48726 DPT=1080 WINDOW=64240 RES=0x00 SYN URGP=0 Oct 9 20:04:13 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=159.65.52.209 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=15648 DF PROTO=TCP SPT=48726 DPT=1080 WINDOW=64240 RES=0x00 SYN URGP=0 Oct 9 20:04:14 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=159.65.52.209 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=15649 DF PROTO=TCP SPT=48726 DPT=1080 WINDOW ... show less	Port Scan
🇫🇷 Little Iguana	2026-10-09 18:04:13 (2 days ago)	trying to access non-authorized port	Port Scan
Anonymous	2026-10-09 17:45:35 (2 days ago)	Blocked by firewall on hugin [1080/tcp] \| Rule: UFW \| SPT: 42634 \| TTL: 57 \| LEN: 60 \| TOS: 0x00 • R ... show more Blocked by firewall on hugin [1080/tcp] \| Rule: UFW \| SPT: 42634 \| TTL: 57 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇿 lp	2026-10-09 17:28:04 (2 days ago)	anomaly: tcp_port_scan, 501 > threshold 500, repeats 23810 times	Port Scan
🇨🇭 Elysium Security	2026-10-09 16:32:45 (2 days ago)	Mass port scanning on a whole network	Port Scan
🇹🇷 Domainhizmetleri.com	2026-10-09 16:19:52 (2 days ago)	Source: DH Hunter (Honeypot) \| Reason: HTTP Probe (1080/tcp) [non-standard port]	Web App Attack
🇬🇧 essinghigh	2026-10-09 16:04:19 (2 days ago)	IPS Detection: 159.65.52.209 -> DPT: 1080	Port Scan
🇳🇱 overture.bar	2026-10-09 15:59:06 (2 days ago)	Blocked by UFW on NsmallFE [1080/tcp] \| SPT: 52668 \| TTL: 53 \| LEN: 60 \| TOS: 0x00	Port Scan
🇨🇦 Blinker73	2026-10-09 15:26:47 (2 days ago)	2026-10-09T11:26 kernel: OUT= SRC=159.65.52.209 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=20152 DF P ... show more 2026-10-09T11:26 kernel: OUT= SRC=159.65.52.209 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=20152 DF PROTO=TCP SPT=33110 DPT=1080 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-09T11:26 kernel: OUT= SRC=159.65.52.209 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=20153 DF PROTO=TCP SPT=33110 DPT=1080 WINDOW=64240 RES=0x00 SYN URGP=0 2026-10-09T11:26 kernel: OUT= SRC=159.65.52.209 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=20154 DF PROTO=TCP SPT=33110 DPT=1080 WINDOW=64240 RES=0x00 SYN URGP= show less	Port Scan
🇫🇷 zulzeen	2026-10-09 15:25:37 (2 days ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Open Proxy Probe)	Hacking Open Proxy
Anonymous	2026-10-09 15:19:44 (2 days ago)	...	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a03:b0c0:3:f0:0:3:17ce:5000

🇺🇸 198.12.148.211

🇳🇱 176.65.149.235

🇩🇪 165.154.164.21

🇮🇳 122.183.50.42

🇮🇩 103.90.67.3

🇦🇷 45.189.186.77

🇧🇷 45.187.226.64

🇺🇸 2602:80d:1008::d8

🇩🇪 193.124.20.236

🇨🇴 181.59.148.108

🇯🇵 165.154.231.129

🇩🇪 130.12.180.51

🇵🇭 122.2.1.98

🇨🇳 114.219.157.97

🇵🇭 112.204.168.150

🇮🇩 103.98.176.164

🇩🇪 69.5.169.118

🇸🇬 45.78.230.231

🇳🇱 185.174.108.92