JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.22.92.148

165.22.92.148 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 74%: ?

74%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.22.92.148

Whois 165.22.92.148

IP Abuse Reports for 165.22.92.148:

This IP address has been reported a total of 32 times from 28 distinct sources. 165.22.92.148 was first reported on June 30th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-25 00:51:06 (6 days ago)	Blocked by firewall on hugin [30005/tcp] \| Rule: UFW \| SPT: 38108 \| TTL: 54 \| LEN: 52 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [30005/tcp] \| Rule: UFW \| SPT: 38108 \| TTL: 54 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 donarev419	2026-08-10 07:12:44 (3 weeks ago)	Port scan detected on port 8500 (connection without data transfer)	Port Scan
🇧🇾 hbars.by	2026-08-10 03:05:07 (3 weeks ago)	2026-08-10T06:05:05.874269+03:00 radionet dovecot: imap-login: Disconnected: Connection closed: read ... show more 2026-08-10T06:05:05.874269+03:00 radionet dovecot: imap-login: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (disconnected before auth was ready, waited 0 secs): user=<>, rip=165.22.92.148, lip=192.168.3.3, session=<HlAEn6hYbeKlFlyU> 2026-08-10T06:05:07.383178+03:00 radionet dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=165.22.92.148, lip=192.168.3.3, session=<VFYbn6hYgUqlFlyU> show less	Brute-Force
🇩🇪 mailox	2026-08-10 01:33:26 (3 weeks ago)	2026-08-10T03:33:24.992199+02:00 hsx2 postfix/postscreen[838391]: DNSBL rank 3 for [165.22.92.148]:2 ... show more 2026-08-10T03:33:24.992199+02:00 hsx2 postfix/postscreen[838391]: DNSBL rank 3 for [165.22.92.148]:23963 ... show less	Port Scan
🇯🇵 ki3	2026-08-09 22:36:45 (3 weeks ago)	Fail2Ban: Dovecot Attack 165.22.92.148 1786315005.0(JST)	Brute-Force SSH
🇵🇱 strefapi_com	2026-08-09 22:04:31 (3 weeks ago)	Brute-force or trying open relay ...	Brute-Force Web App Attack
🇫🇷 EvoX	2026-08-09 21:00:43 (3 weeks ago)	🛡️ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 2525 [6] TCP	Port Scan
Anonymous	2026-08-09 06:03:30 (3 weeks ago)	165.22.92.148 - - [09/Aug/2026:08:03:29 +0200] "OPTIONS / RTSP/1.0" 400 150 "-" "-" 165.22.92.148 - ... show more 165.22.92.148 - - [09/Aug/2026:08:03:29 +0200] "OPTIONS / RTSP/1.0" 400 150 "-" "-" 165.22.92.148 - - [09/Aug/2026:08:03:29 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xBA\x9E\xF6Sa\xDD\xAD" 400 150 "-" "-" 165.22.92.148 - - [09/Aug/2026:08:03:29 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\x0EJ\x1D\xEF\xCF\x1D\xC6d\xBD\xCC\x93\x1Ch\xF6/\x19i6\x8F\x82\xD7I7\xA2\x8A\x11\x03\x0Ch$\xEE\x15 [\xEC\xC1(sn=H\x81\xE5O\xAA\xE4+9\x01A\x8EJE;\xCD]\x1D\xC28{\xF4\x82yT\x92\x00\x96\x13\x02\x13\x03\x13\x01\x003\x009\x005\x00/\xC0,\xC00\x00\xA3\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0\xAF\xC0\xAD\xC0\xA3\xC0\x9F\xC0]\xC0a\xC0W\xC0S\xC0+\xC0/\x00\xA2\x00\x9E\xC0\xAE\xC0\xAC\xC0\xA2\xC0\x9E\xC0\x5C\xC0`\xC0V\xC0R\xC0$\xC0(\x00k\x00j\xC0s\xC0w\x00\xC4\x00\xC3\xC0#\xC0'\x00g\x00@\xC0r\xC0v\x00\xBE\x00\xBD\xC0" 400 150 "-" "-" 165.22.92.148 - - [09/Aug/2026:08:03:29 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03*\xEAi%7\x0EP\xF8\x12\xDF\x04.\x11\xA2\x1F_\xF8\xFA\x962g\xED\x13\x96\xEE\x88i ... show less	Web App Attack
🇦🇪 abusiveIntelligence	2026-08-09 04:00:00 (3 weeks ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇦🇱 router.al	2026-08-09 02:26:42 (3 weeks ago)	08/09/2026-02:26:42.619665 165.22.92.148 Protocol: 6 ET SCAN MS Terminal Server Traffic on Non-stand ... show more 08/09/2026-02:26:42.619665 165.22.92.148 Protocol: 6 ET SCAN MS Terminal Server Traffic on Non-standard Port show less	Port Scan
🇦🇺 afleventoffice.com.au	2026-08-08 15:46:32 (3 weeks ago)	GET /odinhttpcall1786239991 HTTP/1.1	Web App Attack
🇩🇪 ut-addicted.com	2026-08-08 08:44:21 (3 weeks ago)	Aug 8 10:44:19 www postfix/smtpd\[30158\]: lost connection after CONNECT from unknown\[165.22.92.14 ... show more Aug 8 10:44:19 www postfix/smtpd\[30158\]: lost connection after CONNECT from unknown\[165.22.92.148\] show less	Brute-Force Hacking
🇺🇸 gu-alvareza	2026-08-08 05:05:32 (3 weeks ago)	Nmap.Script.Scanner	Port Scan
🇳🇱 lszovan	2026-08-08 04:00:14 (3 weeks ago)	SSH brute force attack on honeypot sensor. Credentials tried: /, GET / HTTP/1.0/, OPTIONS / HTTP/1.0 ... show more SSH brute force attack on honeypot sensor. Credentials tried: /, GET / HTTP/1.0/, OPTIONS / HTTP/1.0/ Detected by DShield/SANS ISC honeypot sensor. show less	Brute-Force SSH
🇵🇹 redmihype	2026-08-08 01:53:38 (3 weeks ago)	SSH tarpit (endlessh)	Brute-Force SSH

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 209.38.35.35

🇩🇪 194.88.98.112

🇳🇱 94.154.43.82

🇲🇽 66.9.176.146

🇺🇸 192.178.115.211

🇳🇱 188.166.54.11

🇩🇪 167.94.145.21

🇫🇮 147.185.133.191

🇰🇷 119.198.96.190

🇳🇱 92.112.126.183

🇳🇱 45.148.10.157

🇨🇦 20.104.49.130

🇨🇳 111.9.47.89

🇹🇼 110.24.36.36

🇫🇷 91.231.89.7

🇧🇷 45.179.169.193

🇬🇧 45.133.173.8

🇩🇪 35.242.249.105

🇧🇷 189.44.74.18

🇫🇷 164.132.2.2