JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

168.197.159.61

Neutral Activity

Abuse confidence score ?

0% Low Risk

53 reports

22 reporters · latest 10 months ago

ISP	MAXXNET TELECOM
Usage Type	Unknown
ASN	Unknown
Domain Name	maxxnettelecom.com
Country	🇧🇷 Brazil
City	Belo Horizonte, Minas Gerais

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

168.197.159.61 has been reported 53 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 168.197.159.61

This IP address has been reported a total of 53 times from 22 distinct sources. 168.197.159.61 was first reported on June 10th 2023, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-11-17 07:44:39 (10 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 FeG Deutschland	2025-10-29 13:06:38 (11 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇳🇱 exxos	2025-09-28 03:03:01 (1 year ago)	Attacks with Bad user agents	Hacking
🇩🇪 ISPLtd	2025-08-25 14:09:00 (1 year ago)	Aug 25 11:08:29 168.197.159.61 TCP SPT=80 DPT=8792 SYN Aug 25 11:08:38 168.197.159.61 TCP SPT=443 DP ... show more Aug 25 11:08:29 168.197.159.61 TCP SPT=80 DPT=8792 SYN Aug 25 11:08:38 168.197.159.61 TCP SPT=443 DPT=17619 SYN Aug 25 11:08:43 168.197.159.61 TCP SPT=80 DPT=16258 SYN ... show less	DDoS Attack
Anonymous	2025-08-25 13:27:39 (1 year ago)	168.197.159.61 detected on srv02	Port Scan
🇩🇪 ISPLtd	2025-08-14 12:03:05 (1 year ago)	Aug 14 09:00:42 168.197.159.61 TCP SPT=80 DPT=80 SYN Aug 14 09:00:57 168.197.159.61 TCP SPT=80 DPT=8 ... show more Aug 14 09:00:42 168.197.159.61 TCP SPT=80 DPT=80 SYN Aug 14 09:00:57 168.197.159.61 TCP SPT=80 DPT=80 SYN Aug 14 09:02:50 168.197.159.61 TCP SPT=80 DPT=443 SYN Aug 14 ... show less	DDoS Attack
🇩🇪 ISPLtd	2025-08-14 01:12:18 (1 year ago)	Aug 13 22:11:10 168.197.159.61 TCP SPT=80 DPT=58056 SYN Aug 13 22:11:21 168.197.159.61 TCP SPT=443 D ... show more Aug 13 22:11:10 168.197.159.61 TCP SPT=80 DPT=58056 SYN Aug 13 22:11:21 168.197.159.61 TCP SPT=443 DPT=32832 SYN Aug 13 22:11:29 168.197.159.61 TCP SPT=443 DPT=60225 SYN ... show less	DDoS Attack
🇩🇪 ISPLtd	2025-08-13 16:09:05 (1 year ago)	Aug 13 13:08:21 168.197.159.61 TCP SPT=443 DPT=15944 SYN Aug 13 13:08:21 168.197.159.61 TCP SPT=443 ... show more Aug 13 13:08:21 168.197.159.61 TCP SPT=443 DPT=15944 SYN Aug 13 13:08:21 168.197.159.61 TCP SPT=443 DPT=44535 SYN Aug 13 13:08:26 168.197.159.61 TCP SPT=443 DPT=40638 SYN ... show less	DDoS Attack
🇩🇪 sthoyer.de	2025-08-13 12:18:34 (1 year ago)	Aug 13 14:18:21 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6: ... show more Aug 13 14:18:21 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.159.61 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=149 ID=35196 PROTO=TCP SPT=80 DPT=2166 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 13 14:18:33 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.159.61 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=139 ID=36563 PROTO=TCP SPT=443 DPT=24586 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 13 14:18:33 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.159.61 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=139 ID=36563 PROTO=TCP SPT=443 DPT=24586 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 ISPLtd	2025-08-13 12:08:10 (1 year ago)	Aug 13 09:07:52 168.197.159.61 TCP SPT=80 DPT=43666 SYN Aug 13 09:07:54 168.197.159.61 TCP SPT=443 D ... show more Aug 13 09:07:52 168.197.159.61 TCP SPT=80 DPT=43666 SYN Aug 13 09:07:54 168.197.159.61 TCP SPT=443 DPT=57282 SYN Aug 13 09:08:01 168.197.159.61 TCP SPT=80 DPT=40243 SYN ... show less	DDoS Attack
🇩🇪 sthoyer.de	2025-08-13 09:15:29 (1 year ago)	Aug 13 11:14:49 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6: ... show more Aug 13 11:14:49 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.159.61 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=2548 PROTO=TCP SPT=443 DPT=51165 WINDOW=8192 RES=0x00 SYN URGP=0 Aug 13 11:15:22 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.159.61 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=85 ID=6872 PROTO=TCP SPT=80 DPT=4135 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 13 11:15:22 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.159.61 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=85 ID=6872 PROTO=TCP SPT=80 DPT=4135 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 13 11:15:28 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.159.61 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=221 ID=7561 PROTO=TCP SPT=80 DPT=48737 WINDOW=14600 RES=0x00 SYN ... show less	Port Scan
🇩🇪 sthoyer.de	2025-08-13 08:21:48 (1 year ago)	Aug 13 10:18:16 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6: ... show more Aug 13 10:18:16 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.159.61 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=158 ID=63024 PROTO=TCP SPT=443 DPT=23504 WINDOW=14600 RES=0x00 SYN URGP=0 Aug 13 10:19:28 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.159.61 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=70 ID=6414 PROTO=TCP SPT=443 DPT=16029 WINDOW=8192 RES=0x00 SYN URGP=0 Aug 13 10:20:03 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.159.61 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=174 ID=10852 PROTO=TCP SPT=443 DPT=19053 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 13 10:20:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.159.61 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=150 ID=18012 PROTO=TCP SPT=443 DPT=9884 WINDOW=65535 RES=0 ... show less	Port Scan
🇩🇪 ISPLtd	2025-08-13 06:21:11 (1 year ago)	Aug 13 03:20:39 168.197.159.61 TCP SPT=443 DPT=55539 SYN Aug 13 03:20:54 168.197.159.61 TCP SPT=80 D ... show more Aug 13 03:20:39 168.197.159.61 TCP SPT=443 DPT=55539 SYN Aug 13 03:20:54 168.197.159.61 TCP SPT=80 DPT=37877 SYN Aug 13 03:21:01 168.197.159.61 TCP SPT=443 DPT=24649 SYN ... show less	DDoS Attack
🇩🇪 ISPLtd	2025-08-13 01:49:14 (1 year ago)	Aug 12 22:48:38 168.197.159.61 TCP SPT=443 DPT=49472 SYN Aug 12 22:48:45 168.197.159.61 TCP SPT=80 D ... show more Aug 12 22:48:38 168.197.159.61 TCP SPT=443 DPT=49472 SYN Aug 12 22:48:45 168.197.159.61 TCP SPT=80 DPT=12459 SYN Aug 12 22:48:50 168.197.159.61 TCP SPT=80 DPT=36435 SYN A ... show less	DDoS Attack
🇩🇪 WebServ	2025-08-12 20:46:53 (1 year ago)	Blocked by ufw after 5 attempts in last 300s.	Brute-Force

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.181.102.35

🇪🇸 212.63.109.138

🇳🇱 193.47.62.69

🇦🇷 190.189.174.174

🇩🇪 185.30.32.221

🇺🇸 162.216.150.248

🇺🇸 154.54.100.187

🇬🇧 143.110.170.253

🇺🇸 142.147.145.162

🇨🇳 112.94.253.207

🇸🇪 104.23.221.209

🇧🇩 103.92.154.97

🇨🇩 102.223.209.43

🇲🇦 102.100.171.86

🇳🇱 89.248.172.14

🇷🇺 80.69.185.150

🇳🇱 77.239.124.130

🇳🇱 77.239.124.43

🇺🇸 75.153.67.136

🇨🇭 66.198.225.19