JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.22.241.253

165.22.241.253 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.22.241.253

Whois 165.22.241.253

IP Abuse Reports for 165.22.241.253:

This IP address has been reported a total of 65 times from 34 distinct sources. 165.22.241.253 was first reported on October 13th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2024-04-04 20:34:12 (2 years ago)	[Fri Apr 05 03:34:10.082857 2024] [security2:error] [pid 344806:tid 136769798407744] [client 165.22. ... show more [Fri Apr 05 03:34:10.082857 2024] [security2:error] [pid 344806:tid 136769798407744] [client 165.22.241.253:55091] [client 165.22.241.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "156"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.31.0 request_line = GET / HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "Zg8Owqm5JxMaziNoXJ9OxwAAAhs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[344885] [HrLuQiPni/I] [Zg8Owq ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-04-03 06:36:46 (2 years ago)	[Wed Apr 03 13:36:44.505696 2024] [security2:error] [pid 116128:tid 128914741528128] [client 165.22. ... show more [Wed Apr 03 13:36:44.505696 2024] [security2:error] [pid 116128:tid 128914741528128] [client 165.22.241.253:63022] [client 165.22.241.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "156"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.31.0 request_line = GET / HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "Zgz4_NaIZziPSM67VeC0OAAAAdI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[116199] [0884cgPXlvc] [Zgz4_N ... show less	Hacking Web App Attack
🇮🇩 penjaga BRIN	2024-03-13 08:04:15 (2 years ago)	CMS (WordPress or Joomla) brute force attempt.-112	Web App Attack
🇮🇩 penjaga BRIN	2024-03-12 08:03:29 (2 years ago)	CMS (WordPress or Joomla) brute force attempt.-112	Web App Attack
🇮🇩 penjaga BRIN	2024-03-11 08:01:27 (2 years ago)	CMS (WordPress or Joomla) brute force attempt.-111	Brute-Force
🇸🇬 pusathosting.com	2024-03-10 01:11:01 (2 years ago)	polres bruteforce	Brute-Force Web App Attack
🇺🇸 octageeks.com	2023-10-22 04:14:33 (2 years ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇺🇸 octageeks.com	2023-10-21 04:14:25 (2 years ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇺🇸 octageeks.com	2023-10-19 04:14:29 (2 years ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇺🇸 octageeks.com	2023-10-18 04:14:19 (2 years ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇺🇸 Snowdome	2023-10-17 23:00:06 (2 years ago)	165.22.241.253 [SG:14061.0] with UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ... show more 165.22.241.253 [SG:14061.0] with UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 targeting domain: snowplow.io, was challenged by WAF:SIN, DetectionCategory: XSS - Javascript Querystring, ResponseTime: 17ms show less	Web App Attack
🇺🇸 ALSCO®️	2023-10-17 22:01:17 (2 years ago)	Report By ALSCO Security Team: XSS Injection Attempt Detected	SQL Injection
🇺🇸 Secure Gateway®️	2023-10-17 22:01:17 (2 years ago)	Report By Secure Gateway Security Team: XSS Injection Attempt Detected	SQL Injection
🇺🇸 Snowdome	2023-10-17 19:00:08 (2 years ago)	165.22.241.253 [SG:14061.0] with UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ... show more 165.22.241.253 [SG:14061.0] with UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 targeting domain: snowplow.io, was challenged by WAF:SIN, DetectionCategory: XSS - Javascript Querystring, ResponseTime: 15ms show less	Web App Attack
🇬🇧 Buster	2023-10-17 18:38:39 (2 years ago)	Repeated script kiddie mass attack attempts on multiple sites from Perm Blocked High Risk ASN & coun ... show more Repeated script kiddie mass attack attempts on multiple sites from Perm Blocked High Risk ASN & country: show less	Open Proxy Hacking Brute-Force Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 2620:171:66:f005:9999::246

🇦🇴 193.163.125.19

🇳🇱 185.247.46.22

🇺🇸 172.253.192.18

🇺🇸 143.42.164.34

🇺🇸 142.252.53.91

🇺🇸 142.251.121.136

🇮🇷 77.77.82.35

🇮🇳 43.228.166.225

🇰🇪 196.96.130.178

🇮🇶 169.224.95.248

🇯🇵 103.163.220.145

🇬🇧 87.236.176.186

🇧🇷 45.205.1.246

🇦🇷 45.189.187.119

🇨🇳 36.110.172.218

🇹🇷 212.58.5.247

🇹🇼 198.235.24.70

🇬🇧 195.96.139.190

🇧🇷 189.89.178.143