165.22.137.125
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Santa Clara, California
Abuse Reports
Total reports
42 from
39 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=15678,58396,61177
|
Port Scan Hacking | |
| 🇵🇱 dcnet |
FortiGate detected DOS attack from IPv4 address 165.22.137.125
|
DDoS Attack | |
| 🇫🇷 uthul |
T-Pot honeypot: 228 hits on ports [443, 3231, 4443, 5555, 8443, 9608, 29414] (automated)
|
Port Scan Web App Attack | |
| 🇮🇳 nadnitin |
Automated block via Nginx Police. Attacking host 'server' at endpoint 'GET /unknown' with status MALICIOUS-HEX.
|
Web App Attack | |
| 🇺🇸 Phil Schuyler |
Connection probe against a public honeypot service: 1 observed event targeting SOCKS5/1080.
|
Port Scan | |
| 🇷🇺 dnsbd.tech |
nftables: Port scan (TCP:14782) [srv1]
|
Port Scan Hacking | |
| Anonymous |
SSH tarpit (endlessh) connection from 165.22.137.125
|
Brute-Force SSH | |
| 🇳🇬 SentinalX by uzumaru |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: /
|
Open Proxy Port Scan | |
| 🇧🇷 diego |
[probe-smbits-176-124] 2026-11-08 05:39:03, Client: 165.22.137.125, Protocol: 6, Unauthorized activity to HTTP: CONNECT /
|
Web App Attack | |
| 🇺🇸 drewf.ink |
[00:56] Connected to RDP honeypot
|
Brute-Force Hacking | |
| 🇩🇪 sojan |
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=8443 DPT=5555 DPT=4443
|
Port Scan | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
|
Hacking | |
| 🇩🇪 schuh |
06-11-2026:00:04:10UTC [Port Scan] unique_ports:6 ports:24125,33126,24126,9100,22345,33125 (6 packets). SRC=165.22.137.125 TTL=51 DF PROTO=TCP SPT=64402 DPT=24125 SYN
|
Port Scan | |
| 🇺🇸 sefinek.net |
Blocked by UFW on NY01 [3128/tcp] | SPT: 45714 | TTL: 50 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇮 anycast_ac |
Blocked by UFW on legacypanel [22249/tcp] | SPT: 33128 | TTL: 47 | LEN: 60 | TOS: 0x00 • Reported by: FemboyHolding LTD
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown