JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.90.228.148

164.90.228.148 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.90.228.148

Whois 164.90.228.148

IP Abuse Reports for 164.90.228.148:

This IP address has been reported a total of 29 times from 21 distinct sources. 164.90.228.148 was first reported on March 16th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2025-04-24 19:34:14 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 6 times in the last 10800 seconds	DDoS Attack
🇨🇳 ThreatBook.io	2025-04-22 22:17:19 (1 year ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/164.90.228.148	SSH
🇬🇧 Axel	2025-04-22 11:10:30 (1 year ago)	SSH login attempts (endlessh): 2025-04-22T10:50:37.423Z ACCEPT host=::ffff:164.90.228.148 port=32557 ... show more SSH login attempts (endlessh): 2025-04-22T10:50:37.423Z ACCEPT host=::ffff:164.90.228.148 port=32557 fd=6 n=7/4096 show less	Brute-Force SSH
🇳🇱 chilibi.ch	2025-04-21 23:36:48 (1 year ago)	2025-04-21 23:36:48 albla IMAP	Hacking Brute-Force
🇨🇳 ThreatBook.io	2025-04-21 22:18:45 (1 year ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/164.90.228.148 2025 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/164.90.228.148 2025-04-21 14:09:47 / 2025-04-21 14:09:48 /nice%20ports%2C/Tri%6Eity.txt%2ebak 2025-04-21 14:09:46 / show less	SSH
🇳🇱 maxmoodycyber	2025-04-21 19:14:58 (1 year ago)	Unauthorized FTP connection attempt. Client connected then disconnected without authentication.	FTP Brute-Force Port Scan Hacking
🇺🇦 llighthunter	2025-04-21 18:36:07 (1 year ago)	Apr 21 21:36:05 mail postfix/submission/smtpd[18529]: lost connection after CONNECT from unknown[164 ... show more Apr 21 21:36:05 mail postfix/submission/smtpd[18529]: lost connection after CONNECT from unknown[164.90.228.148] Apr 21 21:36:05 mail postfix/submission/smtpd[18530]: improper command pipelining after CONNECT from unknown[164.90.228.148]: EHLO\r\n show less	Port Scan Hacking Spoofing
🇺🇸 Carltonfsck	2025-04-20 23:30:26 (1 year ago)	164.90.228.148 - - [20/Apr/2025:23:30:25 +0000] "GET /odinhttpcall1745191825 HTTP/1.1" 404 49 164.90 ... show more 164.90.228.148 - - [20/Apr/2025:23:30:25 +0000] "GET /odinhttpcall1745191825 HTTP/1.1" 404 49 164.90.228.148 - - [20/Apr/2025:23:30:25 +0000] "POST /sdk HTTP/1.1" 404 49 ... show less	Hacking Web App Attack
🇵🇱 strefapi_com	2025-04-20 17:08:28 (1 year ago)	Brute-force on web app ...	Brute-Force Web App Attack
🇪🇸 robotstxt	2025-04-20 05:12:42 (1 year ago)	164.90.228.148 - - [20/Apr/2025:05:11:42 +0000] "\x00\x00\x07\x00\x08\x00\x03\x00\x04\x00\x05\x00\x0 ... show more 164.90.228.148 - - [20/Apr/2025:05:11:42 +0000] "\x00\x00\x07\x00\x08\x00\x03\x00\x04\x00\x05\x00\x06" 400 156 "-" "-" 164.90.228.148 - - [20/Apr/2025:05:11:42 +0000] "" 400 156 "-" "-" 164.90.228.148 - - [20/Apr/2025:05:11:42 +0000] "OPTIONS / RTSP/1.0" 400 156 "-" "-" 164.90.228.148 - - [20/Apr/2025:05:11:42 +0000] "\x80\x00\x00(r\xFE\x1D\x13\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\x86\xA0\x00\x01\x97\|\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 156 "-" "-" 164.90.228.148 - - [20/Apr/2025:05:11:43 +0000] "\x00\x1E\x00\x06\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 156 "-" "-" ... show less	Web Spam Web App Attack
🇵🇱 nfsec.pl	2025-04-20 00:26:00 (1 year ago)	164.90.228.148 - - [20/Apr/2025:02:24:34 +0200] "GET / HTTP/1.0" 403 406 "-" "-" 164.90.228.148 - - ... show more 164.90.228.148 - - [20/Apr/2025:02:24:34 +0200] "GET / HTTP/1.0" 403 406 "-" "-" 164.90.228.148 - - [20/Apr/2025:02:24:39 +0200] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 403 406 "-" "-" 164.90.228.148 - - [20/Apr/2025:02:26:00 +0200] "GET /odinhttpcall1745108760 HTTP/1.1" 404 403 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 164.90.228.148 - - [20/Apr/2025:02:26:00 +0200] "POST /sdk HTTP/1.1" 403 406 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 164.90.228.148 - - [20/Apr/2025:02:26:00 +0200] "GET /HNAP1 HTTP/1.1" 404 403 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Exploited Host Web App Attack
🇨🇳 ThreatBook.io	2025-04-19 22:17:39 (1 year ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/164.90.228.148 2025 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/164.90.228.148 2025-04-19 06:16:37 / show less	Web App Attack
🇦🇪 abusiveIntelligence	2025-04-19 21:40:00 (1 year ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇧🇪 fpoulet	2025-04-19 10:39:56 (1 year ago)	Blocked by Fail2Ban (Postfix BruteForce)	Brute-Force SSH
🇯🇵 VXG-NET	2025-04-19 09:03:38 (1 year ago)	port=995, indicator_type=hacktool	Hacking

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.147.118.86

🇬🇧 161.35.165.94

🇺🇸 147.185.132.120

🇦🇷 138.219.62.179

🇻🇳 103.28.38.126

🇩🇪 193.124.20.228

🇦🇷 181.209.90.138

🇺🇸 162.216.150.221

🇺🇸 147.185.132.150

🇺🇸 147.185.132.118

🇺🇸 147.185.132.115

🇧🇷 138.0.47.85

🇦🇷 132.255.224.221

🇰🇷 112.216.108.62

🇸🇪 95.155.231.195

🇷🇺 92.253.240.198

🇵🇱 89.68.245.7

🇺🇸 68.1.130.130

🇺🇸 64.62.156.76

🇱🇹 62.60.130.253