JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.22.61.53

165.22.61.53 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.22.61.53

Whois 165.22.61.53

IP Abuse Reports for 165.22.61.53:

This IP address has been reported a total of 74 times from 43 distinct sources. 165.22.61.53 was first reported on February 8th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-22 23:40:35 (4 days ago)	"GET /wp-includes/wlwmanifest.xml HTTP/1.1"	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-06-22 22:28:05 (4 days ago)		Brute-Force Web App Attack
🇬🇧 noise.agency	2026-06-22 14:11:32 (4 days ago)	(wordpress) Failed wordpress login from 165.22.61.53 (SG/Singapore/-)	Brute-Force
🇨🇦 electronico	2026-06-22 13:55:50 (4 days ago)	165.22.61.53 - - [23/Jun/2026:00:55:49 +1100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 2111 "-" "Mozilla/ ... show more 165.22.61.53 - - [23/Jun/2026:00:55:49 +1100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 2111 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ... show less	Brute-Force Web App Attack
🇨🇦 polycoda	2026-06-22 13:41:04 (4 days ago)	AutoBlock: 🔐 WordPress Login Brute Force (40X) (Non Decay-Based) - ↪️ Excessive 30X Errors (Decay-Ba ... show more AutoBlock: 🔐 WordPress Login Brute Force (40X) (Non Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based) show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-06-22 13:32:10 (4 days ago)	Bad_requests	Bad Web Bot
🇬🇧 venus.launch.bz	2026-06-22 13:29:37 (4 days ago)	(wpscan) WordPress probe detected from 165.22.61.53 (SG/Singapore/-)	Hacking
🇳🇱 vaddilyin	2026-06-22 13:10:12 (4 days ago)	{"ClientAddr":"165.22.61.53:61983","ClientHost":"165.22.61.53","ClientPort":"61983","ClientUsername" ... show more {"ClientAddr":"165.22.61.53:61983","ClientHost":"165.22.61.53","ClientPort":"61983","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":27966,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":27966,"RequestAddr":"down.vdkln.com","RequestContentSize":0,"RequestCount":195031,"RequestHost":"down.vdkln.com","RequestMethod":"GET","RequestPath":"/xmlrpc.php?rsd","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-06-22T13:10:06.114939894Z","StartUTC":"2026-06-22T13:10:06.114939894Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-22T13:10:06Z"} {"ClientAddr":"165.22.61.53:63009","ClientHost":"165.22.61.53","ClientPort":"63009","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":51817,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0, ... show less	Web App Attack
🇧🇷 Halux	2026-06-22 13:06:34 (4 days ago)	165.22.61.53 Web Application Firewall multiple violations	Hacking Web App Attack
🇮🇱 Dolphi	2026-06-22 12:50:08 (4 days ago)	POST //xmlrpc.php	Brute-Force Web App Attack
Anonymous	2026-06-22 12:01:06 (4 days ago)	Bot / scanning and/or hacking attempts: GET //website/wp-includes/wlwmanifest.xml HTTP/1.1, GET //si ... show more Bot / scanning and/or hacking attempts: GET //website/wp-includes/wlwmanifest.xml HTTP/1.1, GET //sito/wp-includes/wlwmanifest.xml HTTP/1.1, GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1, GET //xmlrpc.php?rsd HTTP/1.1, GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1, GET / HTTP/1.1, GET //web/wp-includes/wlwmanifest.xml HTTP/1.1, GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1, GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1, GET //wp-includes/wlwmanifest.xml HTTP/1.1, GET //media/wp-includes/wlwmanifest.xml HTTP/1.1, GET //news/wp-includes/wlwmanifest.xml HTTP/1.1, GET //site/wp-includes/wlwmanifest.xml HTTP/1.1, GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1, GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1, GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1, GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1, GET //test/wp-includes/wlwmanifest.xml HTTP/1.1, GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1 show less	Hacking Web App Attack
🇫🇮 as211431.net	2026-06-22 11:41:11 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: //wp1/wp-includes/wlwmanifest.xml UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Bruno	2026-06-22 11:12:37 (4 days ago)	[Mon Jun 22 13:12:30.202943 2026] [authz_core:error] [pid 172187:tid 172276] [client 165.22.61.53:57 ... show more [Mon Jun 22 13:12:30.202943 2026] [authz_core:error] [pid 172187:tid 172276] [client 165.22.61.53:57622] AH01630: client denied by server configuration: /srv/web/sansouire/www2/xmlrpc.php [Mon Jun 22 13:12:36.273663 2026] [authz_core:error] [pid 172187:tid 172278] [client 165.22.61.53:57622] AH01630: client denied by server configuration: /srv/web/sansouire/www2/xmlrpc.php [Mon Jun 22 13:12:36.481982 2026] [authz_core:error] [pid 172187:tid 172288] [client 165.22.61.53:57622] AH01630: client denied by server configuration: /srv/web/sansouire/www2/xmlrpc.php ... show less	Web App Attack
Anonymous	2026-06-22 11:01:20 (4 days ago)	165.22.61.53 - - [22/Jun/2026:13:01:08 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 444 "- ... show more 165.22.61.53 - - [22/Jun/2026:13:01:08 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 165.22.61.53 - - [22/Jun/2026:13:01:08 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 165.22.61.53 - - [22/Jun/2026:13:01:18 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 165.22.61.53 - - [22/Jun/2026:13:01:18 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 165.22.61.53 - - [22/Jun/2026:13:01:19 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 444 "-" "Moz ... show less	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-06-22 10:52:16 (4 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 66.9.160.107

🇲🇽 189.203.160.150

🇬🇧 185.247.137.30

🇺🇸 162.216.150.230

🇫🇷 161.97.148.236

🇩🇪 69.5.169.185

🇺🇸 66.132.195.93

🇺🇸 66.132.172.40

🇺🇸 65.49.1.241

🇰🇷 211.193.249.210

🇧🇪 198.235.24.235

🇻🇳 152.32.250.188

🇺🇸 147.185.132.247

🇵🇭 112.208.189.123

🇧🇪 104.155.19.185

🇷🇺 91.240.123.8

🇺🇸 64.23.136.201

🇸🇬 47.128.111.129

🇱🇹 45.227.254.170

🇳🇱 45.148.10.141