This IP address has been reported a total of
85
times from
78 distinct
sources.
165.22.245.150 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 26
reports;
France
with 11
reports;
Netherlands
with 10
reports.
The most common categories in these recent reports were:
Web App Attack
68
times;
Brute-Force
24
times;
Bad Web Bot
19
times;
Hacking
16
times;
Exploited Host
4
times;
Other
9
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[08/Oct/2026:09:45:45 +0300] -- 165.22.245.150 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp ...
show more[08/Oct/2026:09:45:45 +0300] -- 165.22.245.150 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-includes/ID3/license.txt HTTP/1.1
show less
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
Anonymous
Port scan against our edge firewall, detected by Wazuh: Regel ruf | abuseipdb 100% (78 Meldungen, SG ...
show morePort scan against our edge firewall, detected by Wazuh: Regel ruf | abuseipdb 100% (78 Meldungen, SG)
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 10161
events: 11
created_at ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 10161
events: 11
created_at: 2026-10-08T02:37:48Z
message: Ip 165.22.245.150 performed 'crowdsecurity/http-probing' (11 events over 1.794950198s) at 2026-10-08 02:37:48.163793422 +0000 UTC
target_uri: ["//wp-includes/ID3/license.txt","//feed/","//xmlrpc.php?rsd","//blog/wp-includes/wlwmanifest.xml","//web/wp-includes/wlwmanifest.xml","//wordpress/wp-includes/wlwmanifest.xml","//wp/wp-includes/wlwmanifest.xml","//2020/wp-includes/wlwmanifest.xml","//2019/wp-includes/wlwmanifest.xml","//2021/wp-includes/wlwmanifest.xml","//shop/wp-includes/wlwmanifest.xml"]
method: ["GET"]
status: ["404"]
user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"]
show less
(mod_security) mod_security (id:210410) triggered by 165.22.245.150 (SG/Singapore/-): 5 in the last ...
show more(mod_security) mod_security (id:210410) triggered by 165.22.245.150 (SG/Singapore/-): 5 in the last 300 secs
show less
