JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.22.141.152

165.22.141.152 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.22.141.152

Whois 165.22.141.152

IP Abuse Reports for 165.22.141.152:

This IP address has been reported a total of 29 times from 23 distinct sources. 165.22.141.152 was first reported on August 24th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 David Ferneding	2026-08-25 07:43:09 (2 days ago)	Blocked by UFW (TCP on 8161) Source port: 59687 TTL: 236 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8161) Source port: 59687 TTL: 236 Packet length: 40 TOS: 0x00 This report (for 165.22.141.152) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-08-25 07:21:44 (2 days ago)	Connection atttempts against closed TCP ports Aug 25 08:41:14 BLOCK SRC=165.22.141.152 LEN=40 TOS=0x ... show more Connection atttempts against closed TCP ports Aug 25 08:41:14 BLOCK SRC=165.22.141.152 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=62322 PROTO=TCP SPT=59687 DPT=3306 WINDOW=1024 RES=0x00 SYN Aug 25 09:00:19 BLOCK SRC=165.22.141.152 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=34702 PROTO=TCP SPT=59687 DPT=2376 WINDOW=1024 RES=0x00 SYN Aug 25 09:21:42 BLOCK SRC=165.22.141.152 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=59889 PROTO=TCP SPT=59687 DPT=8081 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇧🇷 diego	2026-08-25 06:52:50 (2 days ago)	[rede-arem1] 08/25/2026-03:52:50.467172, 165.22.141.152, Protocol: 6, ET SCAN Suspicious inbound to ... show more [rede-arem1] 08/25/2026-03:52:50.467172, 165.22.141.152, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇧🇷 diego	2026-08-25 06:23:49 (2 days ago)	[probe-44-49] 2026-08-25 06:06:28, Client: 165.22.141.152, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-08-25 06:06:28, Client: 165.22.141.152, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
Anonymous	2026-08-25 05:20:30 (2 days ago)	Sensitive Configuration File Disclosure.	Hacking
🇮🇹 kgreen	2026-08-24 22:01:03 (2 days ago)	Graylog firewall DROP detected. Hits=1384, ASN=AS14061, Provider=DigitalOcean, LLC, Country=US, Rang ... show more Graylog firewall DROP detected. Hits=1384, ASN=AS14061, Provider=DigitalOcean, LLC, Country=US, Range=165.22.128.0/20, AbuseScore=93, Reports=17 show less	Port Scan Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇧🇷 noconex	2026-08-24 19:42:11 (2 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Suspicious inbound to PostgreSQL port 5432) ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Suspicious inbound to PostgreSQL port 5432) detectado de 165.22.141.152 show less	Port Scan Brute-Force SSH
🇫🇷 sthoyer.de	2026-08-24 19:41:40 (2 days ago)	Aug 24 21:41:39 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Aug 24 21:41:39 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=165.22.141.152 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=59555 PROTO=TCP SPT=49875 DPT=3306 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇲🇿 delsio	2026-08-24 19:05:08 (2 days ago)	AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=165.22.141.152; destinati ... show more AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=165.22.141.152; destination=169.255.135.201; destination_port=6379; score=100; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=repeated high-score sensitive-port hits=3 dsts=1 port=6379 show less	Port Scan
🇮🇹 kgreen	2026-08-24 19:01:03 (2 days ago)	Graylog firewall DROP detected. Hits=1002, ASN=AS14061, Provider=DigitalOcean, LLC, Country=US, Rang ... show more Graylog firewall DROP detected. Hits=1002, ASN=AS14061, Provider=DigitalOcean, LLC, Country=US, Range=165.22.128.0/20, AbuseScore=93, Reports=17 show less	Port Scan Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇩🇪 kingjan1999	2026-08-24 18:53:27 (2 days ago)	Blocked by UFW [27017/tcp] \| SPT: 49767 \| TTL: 240 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [27017/tcp] \| SPT: 49767 \| TTL: 240 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-08-24 18:02:50 (3 days ago)	Connection atttempts against closed TCP ports Aug 24 19:06:37 BLOCK SRC=165.22.141.152 LEN=40 TOS=0x ... show more Connection atttempts against closed TCP ports Aug 24 19:06:37 BLOCK SRC=165.22.141.152 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=39954 PROTO=TCP SPT=49767 DPT=5672 WINDOW=1024 RES=0x00 SYN Aug 24 19:15:36 BLOCK SRC=165.22.141.152 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=33941 PROTO=TCP SPT=49875 DPT=8081 WINDOW=1024 RES=0x00 SYN Aug 24 20:02:49 BLOCK SRC=165.22.141.152 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=34412 PROTO=TCP SPT=49875 DPT=9200 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇫🇷 WebServ	2026-08-24 17:39:35 (3 days ago)	Fail2Ban jail [portscan-block]: banned after 5 failed attempt(s). Unauthorized port scan	Port Scan
🇨🇭 dirtronin	2026-08-24 17:38:46 (3 days ago)	Honeypot connection to elastic decoy port — banner-match: . Source: HyveHeim/HyveGuard tripwire (aut ... show more Honeypot connection to elastic decoy port — banner-match: . Source: HyveHeim/HyveGuard tripwire (auto-report). show less	Port Scan Hacking Exploited Host
Anonymous	2026-08-24 17:37:34 (3 days ago)	Honeypot wireguard: source IP triggered 3+ blocked attempts in 24h (ports: 8443/tcp (HTTPS-alt))	Port Scan

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.126.222.66

🇧🇷 2400:cb00:729:1000:51a9:b05f:ef46:e2f6

🇺🇸 216.25.89.100

🇲🇽 187.195.92.65

🇰🇷 115.178.75.243

🇳🇱 104.234.138.60

🇷🇺 95.72.67.102

🇺🇦 46.149.190.224

🇰🇷 34.64.248.240

🇮🇳 4.224.61.94

🇩🇪 195.230.103.249

🇳🇱 193.47.62.69

🇲🇽 177.240.106.122

🇵🇱 176.53.159.197

🇨🇳 153.3.55.59

🇸🇬 152.32.220.188

🇰🇿 95.59.243.23

🇷🇺 77.40.3.183

🇺🇸 34.16.161.203

🇨🇦 20.104.81.161