JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.35.149.159

161.35.149.159 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.35.149.159

Whois 161.35.149.159

IP Abuse Reports for 161.35.149.159:

This IP address has been reported a total of 31 times from 19 distinct sources. 161.35.149.159 was first reported on October 18th 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Cyber SOC	2026-03-11 07:40:56 (2 months ago)	Peaksys - 2026-03-11 07:39:06 UTC+00	Port Scan Hacking SQL Injection Web App Attack
🇺🇸 [email protected]	2026-03-10 15:26:00 (2 months ago)	[Tue Mar 10 00:46:05.599296 2026] [authz_core:error] [pid 15567] [client 161.35.149.159:55034] AH016 ... show more [Tue Mar 10 00:46:05.599296 2026] [authz_core:error] [pid 15567] [client 161.35.149.159:55034] AH01630: client denied by server configuration: /opt/homebrew/var/www/.git [Tue Mar 10 00:46:07.993779 2026] [authz_core:error] [pid 15378] [client 161.35.149.159:53214] AH01630: client denied by server configuration: /opt/homebrew/var/www/.git show less	Web App Attack Hacking
🇺🇸 directorioeducativo.com	2026-03-10 04:45:02 (2 months ago)	GET URL: "/.git/config"Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko ... show more GET URL: "/.git/config"Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
🇫🇮 kumiko	2026-03-10 04:27:47 (2 months ago)	[2026-03-10 06:27:47] Probing for dotfiles "GET /.git/config HTTP/1.1" 403	Bad Web Bot Web App Attack
Anonymous	2026-03-10 04:19:54 (2 months ago)	git/env leak probe	Web App Attack
🇺🇸 IvyBayAdmin	2026-03-10 04:19:03 (2 months ago)	03/09/2026-21:19:02.550463 [] SURICATA STREAM excessive retransmissions [] [Classification: Gene ... show more 03/09/2026-21:19:02.550463 [] SURICATA STREAM excessive retransmissions [] [Classification: Generic Protocol Command Decode] [Priority: 3] {TCP} [IP]:443 -> [IP]:43040 show less	Hacking Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-03-10 04:15:24 (2 months ago)	(mod_security-custom) mod_security (id:210492) triggered by 161.35.149.159 (NL/The Netherlands/North ... show more (mod_security-custom) mod_security (id:210492) triggered by 161.35.149.159 (NL/The Netherlands/North Holland/Amsterdam/-/[AS14061 DIGITALOCEAN-ASN]): 1 in the last 3600 secs (0-srv1) show less	Hacking
🇺🇸 kosada.com	2026-03-10 03:52:14 (2 months ago)	Web vulnerability probing: /.git/config	Web App Attack
🇳🇱 alexbfr	2026-03-10 03:51:28 (2 months ago)	Web attack/scanning directories detected via nginx \| Log: 161.35.149.159 - - [10/Mar/2026:04:50:34 + ... show more Web attack/scanning directories detected via nginx \| Log: 161.35.149.159 - - [10/Mar/2026:04:50:34 +0100] "GET /.git/config HTTP/1.1" 404 331 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Bad Web Bot Web App Attack
🇳🇱 bazter.pro	2026-03-10 03:13:57 (2 months ago)	161.35.149.159 - - [10/Mar/2026:03:13:56 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 ... show more 161.35.149.159 - - [10/Mar/2026:03:13:56 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇺🇸 Starburst SysOp Team	2026-01-25 12:54:58 (4 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-iad5-2)	Hacking Bad Web Bot
🇩🇪 Lazentis	2026-01-25 08:23:29 (4 months ago)	Unauthorized access attempt to port 3389 (tcp)	Brute-Force SSH
🇺🇸 MPL	2026-01-25 07:46:58 (4 months ago)	tcp/2000	Port Scan
🇺🇸 MPL	2026-01-25 07:46:58 (4 months ago)	tcp ports: 15000,2000 (3 or more attempts)	Port Scan
🇫🇷 geot	2024-03-03 12:50:17 (2 years ago)	GET /1.php HTTP/1.1 GET /upl.php HTTP/1.1 GET /password.php HTTP/1.1 GET /info.php HTTP/1.1 GET /for ... show more GET /1.php HTTP/1.1 GET /upl.php HTTP/1.1 GET /password.php HTTP/1.1 GET /info.php HTTP/1.1 GET /form.html HTTP/1.1 GET /geoip/ HTTP/1.1 GET /files/ HTTP/1.1 GET /bundle.js HTTP/1.1 GET /systembc/password.php HTTP/1.1 show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.16.94.18

🇺🇸 208.87.243.131

🇫🇷 194.60.87.79

🇨🇳 180.76.146.235

🇸🇬 172.253.84.217

🇭🇰 152.32.132.203

🇫🇮 147.185.133.67

🇨🇳 123.245.84.210

🇻🇳 103.70.114.227

🇧🇩 103.4.145.50

🇬🇧 94.5.53.82

🇭🇰 45.142.154.98

🇻🇪 38.150.92.152

🇳🇱 34.6.188.142

🇧🇷 206.0.11.112

🇩🇪 196.242.141.20

🇸🇮 176.65.134.34

🇺🇸 159.203.102.219

🇨🇳 153.0.83.180

🇮🇳 117.242.144.17