JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

165.227.120.48

Neutral Activity

Abuse confidence score ?

0% Low Risk

58 reports

42 reporters · latest 10 months ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	1655381.cloudwaysapps.com
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

165.227.120.48 has been reported 58 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 165.227.120.48

Export CSV

This IP address has been reported a total of 58 times from 42 distinct sources. 165.227.120.48 was first reported on March 7th 2025, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 EGP Abuse Dept	2025-11-30 03:55:26 (10 months ago)	Unauthorized connection to MySQL port 3306	Port Scan Hacking
🇩🇪 Alfafoxtrot	2025-10-26 10:10:15 (11 months ago)	Reason: malware \| src-ip: 165.227.120.48 \| dport=80 \| Protoc.=TCP \| Inc. 2d: 1	Exploited Host
🇺🇸 drodrig	2025-10-26 07:31:25 (11 months ago)	CrowdSec triggered: %!s(*string=0xc00c830820) (0 events)	Brute-Force
🇩🇪 Alfafoxtrot	2025-10-25 09:53:32 (11 months ago)	Reason: malware \| src-ip: 165.227.120.48 \| dport=80 \| Protoc.=TCP \| Inc. 2d: 1	Exploited Host
🇺🇸 gu-alvareza	2025-10-25 07:05:04 (11 months ago)	SystemBC.Botnet	DDoS Attack Hacking
🇦🇺 bpolson	2025-10-24 15:15:50 (11 months ago)	Honeypot hit port 80. (8)	Port Scan Web App Attack
🇩🇪 lmathe	2025-10-24 11:51:56 (11 months ago)	37.114.56.151 165.227.120.48 US - [24/Oct/2025:13:51:54 +0200] 404 "GET /upl.php HTTP/1.1" referer: ... show more 37.114.56.151 165.227.120.48 US - [24/Oct/2025:13:51:54 +0200] 404 "GET /upl.php HTTP/1.1" referer: "-" "Mozilla/5.0" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 311 37.114.56.151 165.227.120.48 US - [24/Oct/2025:13:51:55 +0200] 404 "GET /password.php HTTP/1.1" referer: "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 374 ... show less	Web App Attack
🇺🇸 Gabriel Camargo	2025-10-24 11:41:06 (11 months ago)	165.227.120.48 - - [24/Oct/2025:06:41:04 -0500] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 1 ... show more 165.227.120.48 - - [24/Oct/2025:06:41:04 -0500] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 165.227.120.48 - - [24/Oct/2025:06:41:04 -0500] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" 165.227.120.48 - - [24/Oct/2025:06:41:04 -0500] "GET /t4 HTTP/1.1" 404 134 "-" "Mozilla/5.0" ... show less	Brute-Force SSH
🇬🇧 powersec	2025-10-24 10:03:11 (11 months ago)	Malicious Network Traffic. Request: \x16\x03\x01\x00{\x01\x00\x00w\x03\x03u4\x85\xD7\xAE\x02SUS36\xA ... show more Malicious Network Traffic. Request: \x16\x03\x01\x00{\x01\x00\x00w\x03\x03u4\x85\xD7\xAE\x02SUS36\xAFWf\xF92/B\xAC\x90\xC2\xAD\xF8\xF7;\x801e.=\xD3\xCF\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0 show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Alfafoxtrot	2025-10-24 09:16:32 (11 months ago)	Reason: malware \| src-ip: 165.227.120.48 \| dport=80 \| Protoc.=TCP \| Inc. 2d: 1	Exploited Host
Anonymous	2025-10-24 08:08:03 (11 months ago)	165.227.120.48 - - [24/Oct/2025:08:08:02 +0000] "GET / HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows N ... show more 165.227.120.48 - - [24/Oct/2025:08:08:02 +0000] "GET / HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 165.227.120.48 - - [24/Oct/2025:08:08:02 +0000] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 165.227.120.48 - - [24/Oct/2025:08:08:02 +0000] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" 165.227.120.48 - - [24/Oct/2025:08:08:02 +0000] "GET /t4 HTTP/1.1" 404 134 "-" "Mozilla/5.0" 165.227.120.48 - - [24/Oct/2025:08:08:02 +0000] "GET /geoip/ HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 165.227.120.48 - - [24/Oct/2025:08:08:03 +0000] "GET /favicon.ico HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 165.227.120.48 - - [24/Oct/2025:08:08:03 +0000] "GET /1.php HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; ... show less	FTP Brute-Force
🇺🇸 WebRanger	2025-10-24 07:29:17 (11 months ago)	\x16\x03\x01\x00\x01\x00\x00w\x03\x03\xDF\x1A\xA3\xA9\xD8\xBD2.\x0F\xBEU\xBC\x83\xA0\xCAN\xED\x7FxuU ... show more \x16\x03\x01\x00\x01\x00\x00w\x03\x03\xDF\x1A\xA3\xA9\xD8\xBD2.\x0F\xBEU\xBC\x83\xA0\xCAN\xED\x7FxuUjmGfs\x95\x91jo\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0 400 150 "- \x16\x03\x01\x00\x01\x00\x00w\x03\x03\xDF\x1A\xA3\xA9\xD8\xBD2.\x0F\xBEU\xBC\x83\xA0\xCAN\xED\x7FxuUjmGfs\x95\x91jo\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "- show less	Bad Web Bot Web App Attack
Anonymous	2025-10-24 05:27:06 (11 months ago)	SystemBC.Botnet	Hacking Bad Web Bot Web App Attack
🇺🇸 netllama	2025-10-24 02:57:17 (11 months ago)	[Thu Oct 23 19:57:15.128837 2025] [proxy_fcgi:error] [pid 3787475:tid 3787530] [client 165.227.120.4 ... show more [Thu Oct 23 19:57:15.128837 2025] [proxy_fcgi:error] [pid 3787475:tid 3787530] [client 165.227.120.48:53096] AH01071: Got error 'Primary script unknown' [Thu Oct 23 19:57:15.688842 2025] [proxy_fcgi:error] [pid 3787475:tid 3787511] [client 165.227.120.48:53128] AH01071: Got error 'Primary script unknown' ... show less	Hacking Web App Attack
Anonymous	2025-10-24 02:48:09 (11 months ago)	B: f2b 404 5x	Web App Attack

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 200.105.172.184

🇵🇭 154.18.197.35

🇭🇰 2401:2660:216:70ad:8428:b0b9:34e0:d866

🇰🇷 221.162.218.85

🇮🇷 217.218.34.45

🇩🇪 213.209.159.242

🇺🇸 209.141.47.217

🇺🇸 193.202.86.18

🇺🇸 162.216.149.11

🇺🇸 130.49.11.240

🇳🇱 109.160.32.105

🇩🇪 47.91.77.245

🇮🇩 43.133.140.5

🇯🇵 35.200.15.155

🇨🇳 27.202.16.182

🇨🇳 14.103.25.86

🇺🇸 2600:1702:75f0:ffc0:a15a:522b:689a:61c6

🇳🇱 193.47.62.69

🇨🇳 183.230.9.103

🇬🇧 157.245.37.37