165.22.38.99
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Clifton, New Jersey
Abuse Reports
Total reports
126 from
73 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇰 sbk97 (https://sayor.net) |
SAYOR honeypot: observed attack /.env
|
Brute-Force | |
| 🇹🇷 cagatayakinci.com |
Web App Attack was Blocked. IP has been banned for 1 day Çarşamba, 14 Ocak 2026 08:31 ÖÖ
|
Web App Attack | |
| 🇸🇪 KIDOS |
KASM auto: exploit_/.env
|
Brute-Force SSH | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/165.22.38.99
2026-01-09 00:04:19 /.git/config
2026-01-09 00:04:19 /.env
|
Web App Attack | |
| 🇧🇪 boxed-it |
GET /.env (Tarpitted for 1d15h8m28s, wasted 8.06MB)
|
Web App Attack | |
| 🇧🇪 boxed-it |
GET /.env (Tarpitted for 1d15h8m58s, wasted 8.06MB)
|
Web App Attack | |
| 🇧🇪 sid3windr |
GET /.env (Tarpitted for 1d15h8m38s, wasted 8.06MB)
|
Web App Attack | |
| 🇧🇪 sid3windr |
GET /.env (Tarpitted for 1d15h8m29s, wasted 8.06MB)
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/3000 (8 or more attempts)
|
Port Scan | |
| Anonymous |
Portscan: TCP/8000 (3x), TCP/3000 (3x)
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=60996 dstport=3000
|
Port Scan | |
| 🇬🇧 Nov |
Unauthorized HTTP access attempt (tcp/3000)
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=47959 dstport=3000
|
Port Scan | |
| 🇬🇧 Andrew |
Blocked by UFW (TCP on port 3000).
Source port: 34278
TTL: 240
Packet length: 44
TOS: 0x00
This report (for 165.22.38.99) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇯🇵 mkaraki |
1767929010 # Service_probe # SIGNATURE_SEND # source_ip:165.22.38.99 # dst_port:3000
...
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown