165.22.84.9

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
96 reports
68 reporters · latest 11 months ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

165.22.84.9 has been reported 96 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
96 from 68 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇧🇪 boxed-it
GET /.env (Tarpitted for 1d15h8m31s, wasted 8.06MB)
Web App Attack
🇧🇪 boxed-it
GET /.env (Tarpitted for 1d15h8m43s, wasted 8.06MB)
Web App Attack
🇧🇪 boxed-it
GET /.env (Tarpitted for 1d15h8m51s, wasted 8.06MB)
Web App Attack
🇰🇪 Oste
Unauthorized activity detected from reported IP, including scanning and intrusion attempts.
Hacking SQL Injection Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/165.22.84.9 2025-11-23 02:30:12 /.env 2025-11-23 02:29:18 /.env
Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇮🇪 RoboSOC
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
Port Scan
🇨🇳 primal
Detected 1 attacks from 165.22.84.9 (Germany) against GitLab honeypot. Targeted ports: 3000. Attack details: {"body":"","content_type":"","header":{"Accept":["*/*"],"Accept-Encoding":["gzip"],"User-Agent":["Mo First seen: 2025-11-23 20:54:51
Port Scan Web App Attack
🇺🇸 MPL
tcp/3000 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/3000 (8 or more attempts)
Port Scan
🇳🇱 Study Bitcoin 🤗
2 port probes: 2x tcp/3000 (remoteware client) [ros]
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 3000
Port Scan Hacking Exploited Host
Anonymous
Port Scan Brute-Force SSH
Anonymous
Http Port:8000 (http_status:403) - Agent:Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 147.185.133.248
🇺🇸 136.108.211.83
🇺🇸 136.108.205.255
🇺🇸 136.108.42.8
🇺🇸 136.108.34.174
🇫🇷 91.231.89.207
🇫🇷 91.196.152.7
🇳🇱 81.19.216.124
🇻🇳 58.186.20.101
🇺🇸 45.79.207.252
🇹🇭 43.133.106.162
🇳🇱 34.6.173.255
🇹🇷 193.35.155.85
🇺🇸 136.107.97.191
🇺🇸 136.107.57.148
🇺🇸 136.107.52.10
🇺🇸 136.107.28.118
🇺🇸 136.107.5.198
🇺🇸 136.107.4.80
🇻🇳 115.76.108.233
feedback