165.22.49.207
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇸🇬 Singapore
- City
- Singapore
Abuse Reports
Total reports
77 from
67 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇱 bmino.pl |
Autoban IP(2): 165.22.49.207 - Hostname: DigitalOcean, LLC - City: Singapore - Country: Singapore - Organization: DigitalOcean, LLC - Reason: POST /xmlrpc.php HTTP/1.1
|
Web App Attack | |
| 🇺🇸 kosada.com |
Repeated requests for suspicious nonexistent URLs, for example: /new/wp-includes/js/json2.js (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15")
|
Web App Attack | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇫🇷 Feelautom |
[FeelAutom Auto-Ban] PathScan: /wordpress/wp-includes/js/json2.js (Score: 200)
|
Port Scan | |
| 🇦🇹 René Hickersberger |
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0.1) Gecko/20100101 Firefox/120.0.1"
|
Web App Attack | |
| 🇺🇸 netlinkpro |
Web scanning: probed for /blog/wp-includes/js/json2.js, /new/wp-includes/js/json2.js, /old/wp-includes/js/json2.js, /test/wp-includes/js/json2.js and 3 more. 7 requests, all refused (HTTP 4xx), 2026-11-08 13:28–13:28 UTC.
|
Web App Attack | |
| 🇫🇷 Bensay |
Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result=blocked; user-agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.2151.97
|
Port Scan | |
| 🇩🇪 Hazzard |
(wordpress) Failed wordpress login from 165.22.49.207 (SG/Singapore/-/Singapore/-/[redacted]): (CF_ENABLE)
|
Brute-Force | |
| Anonymous |
(wordpress) Failed login wp-login.php or xmlrpc.php
|
Web App Attack | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇺🇸 tworjaga |
Automated web attack detected by a SOC sensor: WordPress probing on a non-WordPress site. Requests: GET /wordpress/wp-includes/js/json2.js → 404, GET /wp/wp-includes/js/json2.js → 404, GET /wp-includes/js/json2.js → 404
|
Web App Attack | |
| 🇨🇦 Sakusen |
Automated web scanning: 7 reqs, 7 paths probed, 7 returned 404; probed: 7 other
|
Bad Web Bot | |
| 🇬🇧 KTSTechnology |
Web vulnerability scanning detected by our ISP firewall
|
Web App Attack | |
| 🇺🇸 RH5 |
Restricted URL probing (/xmlrpc.php) (UTC 2026-11-07 08:58)
|
Web App Attack | |
| 🇩🇪 ger-stg-sifi1 |
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown