JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.22.244.161

165.22.244.161 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 90%: ?

90%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.22.244.161

Whois 165.22.244.161

IP Abuse Reports for 165.22.244.161:

This IP address has been reported a total of 24 times from 15 distinct sources. 165.22.244.161 was first reported on August 30th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 ciccio diddo	2026-08-31 01:58:29 (9 hours ago)	High Burst multiple 40X port:Tcp/80,443	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 01:44:53 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 21:44:48.429215 2026] [security2:error] [pid 4577:tid 4577] [client 165.22.244.161:48376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexissteinrauf.com"] [uri "/.git/config"] [unique_id "apTckAiMXW1nGOeAXgJ58wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 01:24:46 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 21:24:41.457272 2026] [security2:error] [pid 26828:tid 26828] [client 165.22.244.161:54972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexgitlin.com"] [uri "/.git/config"] [unique_id "apTX2SHWCKYA8d3JqwjEXgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-08-31 00:06:00 (11 hours ago)	Scanning/Probing (15)	Brute-Force Web App Attack
🇫🇮 mnazibo	2026-08-31 00:00:13 (11 hours ago)	Date: 31/Aug/2026 02:54:24 \| Reported IP: 165.22.244.161 mod_security \| id: 930130 \| SG/group.my_dom ... show more Date: 31/Aug/2026 02:54:24 \| Reported IP: 165.22.244.161 mod_security \| id: 930130 \| SG/group.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| URIs: /.git/config \| Logs: Restricted File Access Attempt show less	SQL Injection Brute-Force Bad Web Bot
🇫🇷 Quarks Solutions	2026-08-30 23:56:03 (11 hours ago)	crowdsecurity/appsec-vpatch	Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 22:37:01 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 18:36:54.198504 2026] [security2:error] [pid 2666251:tid 2666289] [client 165.22.244.161:40014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aldersales.com.exede-sales.com"] [uri "/.git/config"] [unique_id "apSwho8izlOWwYZS9qcMCwAAAU4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-08-30 22:22:00 (13 hours ago)	IPBlock protected site ID [1365-l]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇫🇮 albionfreemarket.com	2026-08-30 21:28:42 (14 hours ago)	165.22.244.161 - - [30/Aug/2026:21:28:38 +0000] "POST //vendor/phpunit/phpunit/src/Util/PHP/eval-std ... show more 165.22.244.161 - - [30/Aug/2026:21:28:38 +0000] "POST //vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/2.0" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 0.000 "-" "SG" 165.22.244.161 - - [30/Aug/2026:21:28:40 +0000] "GET //assets/kcfinder/upload.php HTTP/2.0" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 0.000 "-" "SG" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 21:28:21 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 17:28:17.633102 2026] [security2:error] [pid 6675:tid 6675] [client 165.22.244.161:50908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "albioncapitalfund.com"] [uri "/.git/config"] [unique_id "apSgcXtqpD8e0C9bmDJBvQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 21:08:21 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 17:08:17.058483 2026] [security2:error] [pid 6351:tid 6351] [client 165.22.244.161:45950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "albertacottagebuilder.com.weyoungrenovations.com"] [uri "/.git/config"] [unique_id "apSbwQBHJQXrYrFurOk0-wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 pipeline.es	2026-08-30 20:56:12 (14 hours ago)	Web scanning / probing for vulnerable paths \| URL: //plugin/server/php/ \| Evidence: microsites.grupo ... show more Web scanning / probing for vulnerable paths \| URL: //plugin/server/php/ \| Evidence: microsites.grupoeuropa.com 165.22.244.161 - - [30/Aug/2026:22:55:35 +0200] \"GET //plugin/server/php/ HTTP/1.1\" 404 - \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=SG \| ASN: DIGITALOCEAN-ASN \| Country: SG show less	Port Scan Web App Attack
🇮🇹 VHosting	2026-08-30 20:25:03 (15 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 20:21:39 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 16:21:30.405140 2026] [security2:error] [pid 3852:tid 3852] [client 165.22.244.161:49958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alaskansupernip.com"] [uri "/.git/config"] [unique_id "apSQypYQWabf_fzXcp6BmAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 19:42:49 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 165.22.244.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 15:42:41.228126 2026] [security2:error] [pid 29116:tid 29116] [client 165.22.244.161:52842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alanbeckwith.com"] [uri "/.git/config"] [unique_id "apSHsVKOEwsGn5hjC4V89QAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 122.117.141.59

🇨🇳 49.72.213.251

🇺🇸 40.83.182.122

🇺🇸 40.80.203.148

🇳🇱 45.156.87.127

🇳🇱 45.148.10.152

🇺🇸 35.169.206.177

🇨🇭 34.65.3.62

🇨🇦 20.104.49.130

🇨🇳 218.202.91.147

🇺🇸 172.253.210.29

🇹🇭 171.5.130.247

🇻🇳 151.242.215.124

🇷🇴 141.98.83.48

🇰🇷 112.164.251.239

🇫🇷 91.231.89.68

🇺🇦 91.200.54.73

🇫🇷 91.196.152.207

🇳🇱 91.92.40.176

🇺🇸 66.132.195.37