This IP address has been reported a total of
16
times from
15 distinct
sources.
165.22.70.229 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
165.22.70.229 - - [25/Jul/2026:12:33:37 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 255 "-" ...
show more165.22.70.229 - - [25/Jul/2026:12:33:37 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 255 "-" "Go-http-client/1.1"
show less
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show moreMultiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
2026-07-25 10:35:07 SMTP call from [165.22.70.229] dropped: too many syntax or protocol errors (last ...
show more2026-07-25 10:35:07 SMTP call from [165.22.70.229] dropped: too many syntax or protocol errors (last command was "?", NULL)
2026-07-25 10:35:07 SMTP call from [165.22.70.229] dropped: too many syntax or protocol errors (last command was "?", NULL)
2026-07-25 10:35:07 SMTP call from [165.22.70.229] dropped: too many syntax or protocol errors (last command was "?\b?\035?\027?\030?\031?\v?\002\001??#???\020?<?:\bhttp/0.9\bhttp/1.0\bhttp/1.1\006spdy/1\006spdy/2\006spdy/3\002h2\003h2c\002hq?\r?\024?\022\004\003\b\004\004\001\005\003\b\005\005\001\b\006\006\001\002\001?3?&?$?\035? \336\\262\331\212'\264\277{\242\251\266\371:\307\336\032\312r5+", NULL)
show less
Honeypot hit: HTTP/1.1 request on 1234
GET /query?q=SHOW+DIAGNOSTICS
User-Agent: Go-http-client/1.1 ...
show moreHoneypot hit: HTTP/1.1 request on 1234
GET /query?q=SHOW+DIAGNOSTICS
User-Agent: Go-http-client/1.1; 1234 [3] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-07-25T07:49:14.685407+02:00 mail postfix/submission/smtpd[213780]: improper command pipelining ...
show more2026-07-25T07:49:14.685407+02:00 mail postfix/submission/smtpd[213780]: improper command pipelining after CONNECT from unknown[165.22.70.229]: \026\003\003\001\245\001\000\001\241\003\003"\216[\203\t\005fR!\027\265\257\243\374m\327<\030\200ye\337v\231QW\207\222\215e\3730 9\346U%\336\250\254B\2611\345\230\336\022\240\370`\246`\274\202\b q\001\361\365*\364q\200\373\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237
2026-07-25T07:49:14.891382+02:00 mail postfix/submission/smtpd[213779]: improper command pipelining after CONNECT from unknown[165.22.70.229]: \026\003\003\001\245\001\000\001\241\003\003\022Qa\206\031\211\v'\251\216D\266\232\221k\362$\354\346>\024\2276/\273~z\t\016\354\372\026 S<l\022\262\243\250A\034G\003\2627\v$\267\243S'\220\306\202a\213\277\022\017}\350\323{\032\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000=
2026-07-25T07:49:15.101778+02:00 mail postfix/submission/smtpd[213780]: improper command pip
...
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 165.22.70.229 (DE/Germany/-): 2 in th ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 165.22.70.229 (DE/Germany/-): 2 in the last 3600 secs (0-193)
show less
Blocked by UFW (TCP on 443)
Source port: 61006
TTL: 238
Packet length: 44
TOS: 0x08
This report (fo ...
show moreBlocked by UFW (TCP on 443)
Source port: 61006
TTL: 238
Packet length: 44
TOS: 0x08
This report (for 165.22.70.229) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 165.22.70.229 (DE/Germany/-): 2 in th ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 165.22.70.229 (DE/Germany/-): 2 in the last 3600 secs (0-201)
show less
Blocked by UFW [8082/tcp]
Source port: 61006
TTL: 240
Packet length: 44
TOS: 0x00
This report was g ...
show moreBlocked by UFW [8082/tcp]
Source port: 61006
TTL: 240
Packet length: 44
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on port 3389).
Source port: 61005
TTL: 244
Packet length: 44
TOS: 0x00
This rep ...
show moreBlocked by UFW (TCP on port 3389).
Source port: 61005
TTL: 244
Packet length: 44
TOS: 0x00
This report (for 165.22.70.229) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
Showing 1 to
15
of 16 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩