JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.22.228.56

165.22.228.56 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 77%: ?

77%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.22.228.56

Whois 165.22.228.56

IP Abuse Reports for 165.22.228.56:

This IP address has been reported a total of 33 times from 28 distinct sources. 165.22.228.56 was first reported on August 31st 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 infra-monitor	2026-10-15 14:00:05 (1 day ago)	Automated ban via infra-monitor: wp-sensitive-paths	Web App Attack
🇳🇱 Site.eu	2026-10-15 13:36:21 (1 day ago)	Suspicious multiple login attempts	Brute-Force SSH
🇵🇱 Budyn	2026-10-15 12:44:28 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cdn.teddypot.space \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-10-15 04:30:02 (1 day ago)		Exploited Host
🇳🇱 maxxsense	2026-10-15 04:19:49 (1 day ago)	(wordpress) Failed wordpress login from 165.22.228.56 (CA/Canada/-)	Brute-Force
🇲🇽 octageeks.com	2026-09-23 04:25:06 (3 weeks ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 mnsf	2026-09-22 22:06:01 (3 weeks ago)	Abuse Detected (12)	Brute-Force Web App Attack
🇳🇱 svr	2026-09-22 21:35:32 (3 weeks ago)	Abusive Automated Web Scanner	Web App Attack
🇳🇱 Alt255	2026-09-22 21:33:20 (3 weeks ago)	[cb-16al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ... show more [cb-16al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 165.22.228.56 - - [22/Sep/2026:23:32:52 +0200] "HEAD /wp/ HTTP/2.0" 404 0 "https://themeatmarket.eu/wp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 165.22.228.56 - - [22/Sep/2026:23:32:53 +0200] "HEAD /website/ HTTP/2.0" 404 0 "https://themeatmarket.eu/website/" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 165.22.228.56 - - [22/Sep/2026:23:32:54 +0200] "HEAD /2023/ HTTP/2.0" 404 0 "https://themeatmarket.eu/2023/" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 165.22.228.56 - - [22/Sep/2026:23:32:55 +0200] "HEAD /cms/ HTTP/2.0" 404 0 "https://themeatmarket.eu/cms/" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.3 ... show less	Bad Web Bot Web App Attack
🇨🇭 Origon	2026-09-22 20:44:18 (3 weeks ago)	http-probing - IP: 165.22.228.56 - time="2026-09-22T22:44:18+02:00" level=info msg="(555f66b4f6a745 ... show more http-probing - IP: 165.22.228.56 - time="2026-09-22T22:44:18+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 165.22.228.56 (CA/14061) : 4h ban on Ip 165.22.228.56" module=db show less	Web App Attack
🇫🇷 Octopuce	2026-09-22 20:15:22 (3 weeks ago)	Aggressive web search of vulnerable pages: /wp/ /website/ /2023/ /cms/ /backup/ /en/ /portal/ /v2/ / ... show more Aggressive web search of vulnerable pages: /wp/ /website/ /2023/ /cms/ /backup/ /en/ /portal/ /v2/ /home/ /old/ /store/ /blog/ /shop/ /site/ /w ... show less	Web App Attack
Anonymous	2026-09-22 20:05:51 (3 weeks ago)	Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=32	Hacking
🇩🇪 ghostwarriors	2026-09-22 19:20:06 (3 weeks ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 LRob	2026-09-22 18:58:25 (3 weeks ago)	This address swept through a list of pages that do not exist on our site within seconds — a scanner ... show more This address swept through a list of pages that do not exist on our site within seconds — a scanner working through its wordlist of exploitable paths. Blocked; please check the machine behind it for a scanner or malware. \| method: HEAD \| path: /wp/ (+11 more) \| 2026-09-22 18:58 UTC show less	Port Scan Web App Attack
🇩🇪 yitzhaq	2026-09-22 18:54:39 (3 weeks ago)	165.22.228.56 - - [22/Sep/2026:20:54:36 +0200] "HEAD /site/ HTTP/1.1" 301 200 "-" "Mozilla/5.0 (Linu ... show more 165.22.228.56 - - [22/Sep/2026:20:54:36 +0200] "HEAD /site/ HTTP/1.1" 301 200 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 165.22.228.56 - - [22/Sep/2026:20:54:36 +0200] "HEAD /site/ HTTP/2.0" 404 14 "http://[site]/site/" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 165.22.228.56 - - [22/Sep/2026:20:54:36 +0200] "HEAD /web/ HTTP/1.1" 301 199 "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 165.22.228.56 - - [22/Sep/2026:20:54:36 +0200] "HEAD /web/ HTTP/2.0" 404 14 "http://[site]/web/" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" 165.22.228.56 - - [22/Sep/2026:20:54:36 +0200] "HEAD /2024/ HTTP/1.1" 301 200 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B show less	Bad Web Bot

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 136.248.242.166

🇩🇪 130.12.180.170

🇬🇧 35.203.211.207

🇪🇨 181.199.121.162

🇺🇸 104.22.62.58

🇵🇱 94.26.88.142

🇻🇳 27.79.123.190

🇺🇸 8.230.127.24

🇮🇩 2406:da19:cdc:7802:149:aa65:d973:dfae

🇮🇳 2401:4900:88ac:163d:78c8:65c5:3f8a:3f78

🇧🇷 179.185.1.97

🇺🇸 136.90.80.32

🇺🇸 130.49.10.244

🇧🇬 79.124.56.246

🇺🇸 66.132.172.104

🇬🇧 35.203.210.108

🇰🇷 1.235.183.146

🇩🇪 217.181.87.126

🇩🇪 195.63.26.132

🇺🇸 162.216.149.156