JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.22.28.44

165.22.28.44 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 54%: ?

54%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.22.28.44

Whois 165.22.28.44

IP Abuse Reports for 165.22.28.44:

This IP address has been reported a total of 13 times from 11 distinct sources. 165.22.28.44 was first reported on April 15th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-09-18 00:25:16 (4 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.teddypot.cloud \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 Dominik Lysiak	2026-09-17 22:43:01 (5 hours ago)	165.22.28.44 - - [18/Sep/2026:00:43:00 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 301 162 "-" "Mozilla ... show more 165.22.28.44 - - [18/Sep/2026:00:43:00 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 165.22.28.44 - - [18/Sep/2026:00:43:00 +0200] "GET /wp-json/batch/v1 HTTP/1.1" 401 182 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 165.22.28.44 - - [18/Sep/2026:00:43:00 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇪 RoboSOC	2026-09-17 18:28:53 (9 hours ago)	WordPress Core author exclude SQL Injection Vulnerability, PTR: PTR record not found	Hacking
🇩🇪 SCHAPPY	2026-09-17 13:55:02 (14 hours ago)	Probing for wp2shell vulnerabilities.	Hacking Web App Attack
🇵🇱 Budyn	2026-09-17 11:13:05 (17 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.goblinpot.online \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-09-17 10:50:10 (17 hours ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-09-17 10:41:47 (17 hours ago)	165.22.28.44 - - [17/Sep/2026:06:48:10 +0200] "GET /wp-login.php HTTP/1.1" 301 590 "-" "Mozilla/5.0" ... show more 165.22.28.44 - - [17/Sep/2026:06:48:10 +0200] "GET /wp-login.php HTTP/1.1" 301 590 "-" "Mozilla/5.0" 165.22.28.44 - - [17/Sep/2026:06:48:10 +0200] "GET /wp-login.php HTTP/1.1" 404 4402 "-" "Mozilla/5.0" 165.22.28.44 - - [17/Sep/2026:12:41:43 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 301 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 165.22.28.44 - - [17/Sep/2026:12:41:43 +0200] "GET /wp-json/batch/v1 HTTP/1.1" 403 4455 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 165.22.28.44 - - [17/Sep/2026:12:41:43 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 570 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 165.22.28.44 - - [17/Sep/2026:12:41:43 +0200] "GET /?rest_route=/batch/v1 HTTP/1.1" 403 4454 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 165 show less	Web App Attack Hacking
🇧🇷 Peregrine	2026-09-17 05:03:06 (23 hours ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 165.22.28.44 172.71.103.102 - - [17/Sep/2026:02:02:55 -03 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 165.22.28.44 172.71.103.102 - - [17/Sep/2026:02:02:55 -0300] "GET /wp-login.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇨🇭 backslash	2026-09-17 04:48:03 (23 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇵🇱 Budyn	2026-09-17 04:39:34 (23 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: grafana.astropot.website \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 ChamberofCommerce.com	2026-07-02 05:11:25 (2 months ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇩🇪 yangfan	2026-04-15 04:49:50 (5 months ago)	UFW Blocked [8090/TCP] Source: 165.22.28.44:61012 TTL: 247 Lenth: 44 TOS: 0x00	Port Scan
🇺🇸 MPL	2026-04-15 01:17:11 (5 months ago)	tcp/8082 (2 or more attempts)	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇦 200.46.151.238

🇯🇵 124.45.31.57

🇦🇪 109.177.108.72

🇳🇱 77.239.124.178

🇺🇸 72.215.44.88

🇺🇸 68.183.131.115

🇺🇸 66.132.186.245

🇺🇸 66.132.172.112

🇭🇰 47.239.216.212

🇺🇸 40.76.112.7

🇬🇧 35.203.211.32

🇨🇳 222.222.73.70

🇰🇷 220.118.54.150

🇹🇼 198.235.24.108

🇺🇸 195.184.76.55

🇹🇭 125.27.25.195

🇨🇳 117.81.212.152

🇨🇳 112.46.212.152

🇺🇸 98.97.84.208

🇹🇯 91.218.162.211