JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.90.225.239

164.90.225.239 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.90.225.239

Whois 164.90.225.239

IP Abuse Reports for 164.90.225.239:

This IP address has been reported a total of 35 times from 23 distinct sources. 164.90.225.239 was first reported on May 28th 2023, and the most recent report was 26 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 f14driver	2026-06-11 05:41:35 (26 minutes ago)	...	Brute-Force SSH Port Scan Web App Attack
🇧🇬 MazenHost	2026-06-10 23:28:56 (6 hours ago)	1781134135 - 06/11/2026 02:28:55 Host: 164.90.225.239/164.90.225.239 Port: 143 TCP Blocked ...	Port Scan
🇬🇧 PeravixGroup	2026-06-10 23:02:26 (7 hours ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-10 19:35:37 (10 hours ago)	Honeypot detection: SIP/VoIP unauthorized registration / call routing abuse attempt on port 21. Seve ... show more Honeypot detection: SIP/VoIP unauthorized registration / call routing abuse attempt on port 21. Severity: HIGH. Aaran.cloud show less	Hacking Brute-Force
🇩🇪 ManagedStack	2026-06-10 15:45:02 (14 hours ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇬🇧 PeravixGroup	2026-06-10 11:41:37 (18 hours ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 gu-alvareza	2026-06-10 07:06:07 (23 hours ago)	Nmap.Script.Scanner	Port Scan
Anonymous	2026-06-10 01:24:22 (1 day ago)	Honeypot hit: Empty payload (likely service probe); 9092 [33] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 9092 [33] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 DAUGDE	2026-06-10 01:11:20 (1 day ago)	2026-06-10T03:11:11.614380+02:00 v2202104133598150667 9275893e7080[958375]: Jun 10 03:11:11 9275893e ... show more 2026-06-10T03:11:11.614380+02:00 v2202104133598150667 9275893e7080[958375]: Jun 10 03:11:11 9275893e7080 postfix/submission/smtpd[50625]: lost connection after CONNECT from unknown[164.90.225.239] 2026-06-10T03:11:11.618435+02:00 v2202104133598150667 9275893e7080[958375]: Jun 10 03:11:11 9275893e7080 postfix/submission/smtpd[50625]: improper command pipelining after CONNECT from unknown[164.90.225.239]: EHLO\r\n 2026-06-10T03:11:19.122348+02:00 v2202104133598150667 9275893e7080[958375]: Jun 10 03:11:19 9275893e7080 postfix/submission/smtpd[50625]: lost connection after EHLO from unknown[164.90.225.239] ... show less	Email Spam Spoofing Brute-Force
🇧🇬 MazenHost	2026-06-09 21:47:19 (1 day ago)	1781041638 - 06/10/2026 00:47:18 Host: 164.90.225.239/164.90.225.239 Port: 143 TCP Blocked ...	Port Scan
🇫🇷 Coco Bongo	2026-06-09 10:25:14 (1 day ago)	1781000713 - 06/09/2026 12:25:13 Host: 164.90.225.239/164.90.225.239 Port: 445 TCP Blocked ...	Port Scan
🇳🇱 JCB	2026-06-09 08:30:00 (1 day ago)	164.90.225.239 - - [09/Jun/2026:06:53:59 +0300] "GET /odinhttpcall1780977239 HTTP/1.1" 404 236 164. ... show more 164.90.225.239 - - [09/Jun/2026:06:53:59 +0300] "GET /odinhttpcall1780977239 HTTP/1.1" 404 236 164.90.225.239 - - [09/Jun/2026:06:53:59 +0300] "POST /sdk HTTP/1.1" 404 236 ... show less	Web App Attack Hacking
🇺🇸 gu-alvareza	2026-06-09 07:05:35 (1 day ago)	Nmap.Script.Scanner	Port Scan
🇭🇰 www.winos.me	2026-06-09 01:43:44 (2 days ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
Anonymous	2026-06-09 00:58:57 (2 days ago)	164.90.225.239 - - [09/Jun/2026:02:58:56 +0200] "OPTIONS / RTSP/1.0" 400 150 "-" "-" 164.90.225.239 ... show more 164.90.225.239 - - [09/Jun/2026:02:58:56 +0200] "OPTIONS / RTSP/1.0" 400 150 "-" "-" 164.90.225.239 - - [09/Jun/2026:02:58:56 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03B \xFA\xD8~\x84\xF3\xCE\x089\x85\x0F7\x90\xA7\xD3\xC2\xAA\xEC\xD1\x0F\x0B\xF6\xCA\x05/P\xBB\xC004\x07 N\xA9{\xC1\xDC\x07\xD0:\x9C\x90\x95\x8C\xBF\x7F\x18\x12\x17X<\xDB\xF3\x95\xCF\xF9\xC0!p\x1D\xC8\xC4\xF5\xAA\x00\x96\x13\x02\x13\x03\x13\x01\x003\x009\x005\x00/\xC0,\xC00\x00\xA3\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0\xAF\xC0\xAD\xC0\xA3\xC0\x9F\xC0]\xC0a\xC0W\xC0S\xC0+\xC0/\x00\xA2\x00\x9E\xC0\xAE\xC0\xAC\xC0\xA2\xC0\x9E\xC0\x5C\xC0`\xC0V\xC0R\xC0$\xC0(\x00k\x00j\xC0s\xC0w\x00\xC4\x00\xC3\xC0#\xC0'\x00g\x00@\xC0r\xC0v\x00\xBE\x00\xBD\xC0" 400 150 "-" "-" 164.90.225.239 - - [09/Jun/2026:02:58:56 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03K\x84\x95L$eT\xB2\x13\xF5g\xBE\xBC\xEA$\x81\x16\xB1\xBD\x07\x0E^<R\xEE\x13SE\xB1:m\xCD \xEB.\xEE!\x91n\x9E\x00\xB9lZP\x15.\xDC\xDA\xA3+\x12\xEC\x1C\xC7j\x91\x17\x17p1\xBCw ... show less	Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.7.26.153

🇮🇳 103.98.209.30

🇬🇧 217.154.61.249

🇦🇷 186.13.24.118

🇩🇪 69.5.169.26

🇩🇪 69.5.169.21

🇳🇱 45.148.10.141

🇩🇪 45.135.141.22

🇩🇪 37.46.18.151

🇧🇪 35.205.152.237

🇧🇪 34.38.219.198

🇨🇳 14.103.112.35

🇮🇳 2409:408a:2c49:e837:2037:2f1c:f533:4b59

🇺🇸 216.25.89.115

🇧🇷 201.76.120.30

🇳🇱 185.226.197.12

🇵🇾 181.123.62.210

🇳🇱 176.65.139.247

🇰🇷 49.143.190.82

🇮🇪 34.244.221.34