165.22.1.30
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- North Bergen, New Jersey
Abuse Reports
Total reports
17 from
15 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/8086 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
|
Port Scan | |
| 🇫🇮 payincog |
Date: Oct 18 22:17:21 2026 EAT | Reported IP: 165.22.1.30 mod_security | id: 920350 | US/pay.zagaavipato.com/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; Host header is a numeric IP address; Host header is a numeric IP address
|
SQL Injection Brute-Force Bad Web Bot | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇨🇦 Luhte |
Unsolicited TCP connection from 165.22.1.30 to port 0 at 2026-06-11T19:23:51Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇩🇪 dispaisyenterprises |
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8983 [7] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇩🇪 Justin F. | AS204464 |
Honeypot [nx-infrastructure]: Empty payload (likely service probe); 9300 [8] TCP
Reported by: Justin F.
|
Port Scan | |
| 🇦🇪 abusiveIntelligence |
RDP connect attempt: Nmap Scanner
|
Brute-Force | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Empty payload (likely service probe); 1434 [14] TCP
|
Port Scan | |
| 🇸🇬 drewf.ink |
[01:30] Port scanning. Port(s) scanned: TCP/27017
|
Port Scan | |
| Anonymous |
Honeypot hit: Empty payload (likely service probe); 5984 [31] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇺🇸 3rdKey |
OpenCanary honeypot hit on port 6379 (no legitimate service runs there); logtype 17001. Automated report.
|
Port Scan Hacking | |
| 🇳🇱 soverin |
Network scan on port 3306
|
Email Spam | |
| 🇯🇵 mkaraki |
1780747210 # Service_probe # SIGNATURE_SEND # source_ip:165.22.1.30 # dst_port:9202
...
|
Port Scan | |
| 🇳🇱 EGP Abuse Dept |
Unsolicited connection to port 5432
|
Port Scan Hacking | |
| 🇨🇦 Luhte |
Unsolicited TCP connection from 165.22.1.30 to port 0 at 2026-06-06T09:00:58Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown