JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.22.252.67

165.22.252.67 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 65%: ?

65%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.22.252.67

Whois 165.22.252.67

IP Abuse Reports for 165.22.252.67:

This IP address has been reported a total of 14 times from 11 distinct sources. 165.22.252.67 was first reported on June 3rd 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 KIDOS	2026-06-04 16:32:03 (3 days ago)	CrowdSec detected malicious activity	DDoS Attack
🇸🇪 KIDOS	2026-06-04 16:16:56 (3 days ago)	malicious activity	Web App Attack
🇺🇸 jormaster3k	2026-06-04 16:10:21 (3 days ago)	Attack against Apache (too many 404s)	Web App Attack
Anonymous	2026-06-04 11:05:17 (3 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (177/60 min)'; Requests=177	Port Scan
🇺🇦 URAN Publishing Service	2026-06-04 09:41:24 (3 days ago)	165.22.252.67 - - [04/Jun/2026:12:41:24 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 ... show more 165.22.252.67 - - [04/Jun/2026:12:41:24 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 765 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Web App Attack
🇩🇪 LRob.fr	2026-06-04 08:15:06 (3 days ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
Anonymous	2026-06-04 05:14:46 (3 days ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /upload.php	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-04 02:06:33 (4 days ago)	165.22.252.67 - - [04/Jun/2026:05:06:32 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5 ... show more 165.22.252.67 - - [04/Jun/2026:05:06:32 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-06-03 22:33:28 (4 days ago)	165.22.252.67 - - [04/Jun/2026:00:33:14 +0200] "GET /x.php HTTP/1.1" 404 23519 "www.google.com" "Moz ... show more 165.22.252.67 - - [04/Jun/2026:00:33:14 +0200] "GET /x.php HTTP/1.1" 404 23519 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 165.22.252.67 - - [04/Jun/2026:00:33:14 +0200] "GET /shl.php HTTP/1.1" 404 23521 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 165.22.252.67 - - [04/Jun/2026:00:33:14 +0200] "GET /database.php HTTP/1.1" 404 23524 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 165.22.252.67 - - [04/Jun/2026:00:33:14 +0200] "GET /eval.php HTTP/1.1" 404 23521 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile ... show less	DDoS Attack
🇺🇸 TPI-Abuse	2026-06-03 21:31:45 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 165.22.252.67 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 165.22.252.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 17:31:40.312241 2026] [security2:error] [pid 11150:tid 11150] [client 165.22.252.67:51839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.legalnexuslawfirm.com"] [uri "/wp-config.php"] [unique_id "aiCdPPTeKKrCpmI61rI6dwAAAAA"], referer: www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-06-03 18:14:24 (4 days ago)	165.22.252.67 - - [03/Jun/2026:21:14:22 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 ... show more 165.22.252.67 - - [03/Jun/2026:21:14:22 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 766 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 165.22.252.67 - - [03/Jun/2026:21:14:23 +0300] "GET /wp-content/flame.php HTTP/1.1" 404 765 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Web App Attack
Anonymous	2026-06-03 17:26:07 (4 days ago)	suspicious behavior	Blog Spam Brute-Force Web App Attack
🇨🇭 backslash	2026-06-03 15:03:00 (4 days ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 Ba-Yu	2026-06-03 11:55:38 (4 days ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.32

🇦🇹 130.195.222.141

🇧🇬 79.124.40.82

🇱🇹 77.90.185.80

🇸🇬 47.245.117.221

🇺🇸 40.76.248.252

🇺🇸 2604:a880:400:d1:0:4:8c03:4001

🇩🇪 172.253.1.212

🇮🇩 103.184.180.139

🇻🇳 101.99.14.34

🇩🇪 91.98.151.17

🇭🇰 45.142.154.10

🇧🇪 34.156.41.179

🇧🇪 34.62.211.64

🇸🇬 23.97.62.131

🇭🇰 8.218.12.84

🇩🇪 2a0b:f4c0:16c:11::1

🇩🇪 185.242.3.173

🇵🇭 136.158.58.141

🇮🇩 109.110.188.195