159.65.54.7

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
35% Elevated
19 reports
18 reporters · latest 1 month ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
London, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
19 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇧🇷 Brazil 3 🇨🇦 Canada 2 🇨🇭 Switzerland 2
Most common categories Port Scan 10 Web App Attack 6 Hacking 5 Brute-Force 4 Bad Web Bot 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Admins@Storch
IPS:drop <match> dstport=2000
Brute-Force Exploited Host
🇧🇷 chronos
2026-09-30 19:50:46 UTC-3||Unauthorized connection attempt detected for port scanning
Port Scan
🇧🇷 chronos
Generic malicious activity: Tentativa de varredura de porta TCP... | Port: 2000 | Proto: TCP | Location: United Kingdom, Slough
Port Scan Hacking
🇨🇿 kronos
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:767 | alerts5m:767
Port Scan
🇨🇿 Countryman
repeated unauthorized connection attempts, host sweep, port scan
Port Scan
🇯🇵 S.O.B.A. Dev.
Persistent port scanning or vulnerability scanning
Port Scan
🇨🇦 DRI
Unsolicited TCP traffic on Honeypot, srcport=53152 dstport=2000
Port Scan Hacking
🇮🇳 Mr.Singh
NFT blocked 159.65.54.7 on 01-Oct-2026..
Port Scan Brute-Force
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 2000 [1] TCP
Port Scan
🇷🇴 abuse_IP_reporter
Sep 30 23:37:33 server UFW BLOCK SRC=159.65.54.7 DF PROTO=TCP SPT=54000
Port Scan
🇨🇦 Blinker73
Port Scan
🇨🇭 Origon
http-cve-probing - IP: 159.65.54.7 - time="2026-09-30T08:47:23+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-cve-probing by ip 159.65.54.7 (GB/14061) : 4h ban on Ip 159.65.54.7" module=db
Web App Attack
🇫🇷 masterguru
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-197)
Hacking
🇮🇹 VHosting
Detected WordPress attack from different servers
Brute-Force Web App Attack
🇧🇷 dominioz
Web Spam Blog Spam Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.216.149.76
🇻🇳 116.99.169.71
🇳🇱 94.102.49.190
🇹🇼 34.81.197.42
🇺🇸 4.148.17.175
🇰🇷 211.58.176.42
🇺🇸 199.165.159.220
🇨🇳 114.244.130.4
🇩🇪 109.160.32.40
🇺🇸 103.73.53.139
🇳🇱 93.152.215.39
🇷🇺 78.136.223.227
🇺🇸 65.187.82.161
🇳🇱 64.205.72.217
🇺🇸 47.177.90.109
🇺🇸 34.201.171.37
🇺🇸 34.174.17.249
🇺🇸 34.55.4.36
🇧🇪 34.52.234.95
🇻🇳 14.160.112.135
feedback