JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.16.22.74

165.16.22.74 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 29%: ?

29%

ISP	allocated for ISP Libya east area
Usage Type	Fixed Line ISP
ASN	AS37284
Domain Name	aljeel.ly
Country	🇱🇾 Libya
City	Al Marj, Al Marj

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.16.22.74

Whois 165.16.22.74

IP Abuse Reports for 165.16.22.74:

This IP address has been reported a total of 30 times from 24 distinct sources. 165.16.22.74 was first reported on January 9th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 stechusa	2026-08-25 16:40:14 (4 hours ago)	[Askari] \| country=LY \| Behavior: Outdated browser, Targeting specific pages, No referrer on deep pa ... show more [Askari] \| country=LY \| Behavior: Outdated browser, Targeting specific pages, No referrer on deep pages, HTTP/1.1 over TLS, Concurrent page load during attack show less	Bad Web Bot DDoS Attack
🇺🇸 kosada.com	2026-08-25 11:31:15 (9 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇱 CTMAN dev	2026-08-24 04:03:31 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from LY. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from LY. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: /products/eufy-surveillance-camera-solocam-e30 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-22 12:14:50 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 15:06:40 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇦 polycoda	2026-05-29 11:27:13 (2 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 nodepile	2026-05-25 06:40:39 (3 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-04-04 02:34:50 (4 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/ ua='Mozil ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36') show less	Web App Attack Exploited Host
🇩🇪 FeG Deutschland	2026-03-28 14:14:14 (4 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 kosada.com	2026-03-25 01:23:28 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-03 10:55:07 (5 months ago)	(mod_security) mod_security (id:218580) triggered by 165.16.22.74 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:218580) triggered by 165.16.22.74 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 05:55:00.318698 2026] [security2:error] [pid 29550:tid 29564] [client 165.16.22.74:55894] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:Id. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|yakagroup.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "yakagroup.org"] [uri "/fnaandpartners.com/projects.php"] [unique_id "aaa-BCw5yOL9sbfl3EhqJgAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-02-28 00:27:51 (5 months ago)	165.16.22.74 (LY/Libya/-), 25 distributed imapd attacks on account [redacted]	Brute-Force
🇫🇷 Sklurk	2026-02-23 20:17:53 (6 months ago)	Web App Attack	Web App Attack
Anonymous	2026-02-23 00:55:51 (6 months ago)	[23/Feb/2026:00:55:51 +0000] - 406 406 - GET https secnews.physaphae.fr "/article.php?IdArticle=3576 ... show more [23/Feb/2026:00:55:51 +0000] - 406 406 - GET https secnews.physaphae.fr "/article.php?IdArticle=3576799&NoRedirect=1%2CGTID_SUBSET%28%2F%2A%2150000CONCAT%2A%2F%28%2527~%2527%2C%28%2F%2A%2150000SELECT%2A%2F%28ELT%287541%3D7541%2C1%29%29%29%2C%2527~%2527%29%2C7541%29" [Client 165.16.22.74] [Length 3499] [Gzip -] [Sent-to 192.168.1.192] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" ... show less	SQL Injection
🇨🇦 polycoda	2026-02-15 01:27:35 (6 months ago)	📄 Probes for tons of inexistent files and/or PHP scripts	Hacking Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.155.116.187

🇭🇰 199.45.155.80

🇫🇷 185.202.108.14

🇮🇳 172.253.222.220

🇲🇦 102.96.42.137

🇨🇳 101.23.161.52

🇺🇸 98.150.127.55

🇷🇴 92.118.39.71

🇧🇬 79.124.59.78

🇺🇸 74.220.219.216

🇰🇷 211.115.191.84

🇸🇪 171.25.158.57

🇫🇮 147.185.133.230

🇩🇪 144.31.164.164

🇨🇳 119.249.100.42

🇺🇸 96.37.18.120

🇳🇱 91.92.40.188

🇭🇰 65.181.71.117

🇺🇸 45.33.83.115

🇬🇧 31.171.130.76