165.232.121.85

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
4% Caution
29 reports
24 reporters · latest 2 days ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
29 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇿 Czechia 1
Most common categories SQL Injection 1 Hacking 1 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
| A web attack returned code 200 (success).
Web App Attack Hacking SQL Injection
🇩🇪 EGP Abuse Dept
Scraping webshop URLs (creall.com), likely botnet drone
Bad Web Bot Exploited Host
🇺🇸 RAP
2026-08-09 05:39:31 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇬🇧 Andrew
Blocked by UFW (TCP on port 23). Source port: 42256 TTL: 55 Packet length: 60 TOS: 0x00 This report (for 165.232.121.85) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇺🇸 MPL
tcp port scan (3 or more attempts)
Port Scan
🇰🇷 2048
Telnet credential brute-force observed by honeypot. | Source IP: 165.232.121.85 | Targeted device: OpenWrt router | First seen: 08 Aug 2026 07:15:50 UTC | Last seen: 08 Aug 2026 07:15:50 UTC | Attempts: 1 | Sample credentials: root:root
Brute-Force IoT Targeted
🇫🇷 COMAITE
Honeypot login success
Brute-Force
🇺🇸 RAP
2026-08-08 03:48:17 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
Unauthorized connection to Telnet port 23
Port Scan
🇰🇷 2048
Telnet credential brute-force observed by honeypot. | Source IP: 165.232.121.85 | Targeted device: OpenWrt router | First seen: 06 Aug 2026 19:45:16 UTC | Last seen: 06 Aug 2026 19:45:16 UTC | Attempts: 1 | Sample credentials: root:root
Brute-Force IoT Targeted
🇨🇭 GAS
Brute-Force SSH
🇩🇪 crnpekgoz
[PortScan] Risk=100 ASN=14061 (portscan) Port=23 HoneypotTrap=true | Reported by WardenIPS: https://github.com/msncakma/WardenIPS
Port Scan
🇫🇷 COMAITE
Honeypot login success
Brute-Force
🇫🇷 Hiigara
connection attempt : 165.232.121.85 on port : tcp/23 (Telnet)
Port Scan
🇭🇰 mutebot.net
SRC=165.232.121.85, PROTO=TCP, SPT=55132, DPT=23
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.32
🇺🇸 192.255.149.115
🇮🇩 168.110.195.99
🇺🇸 164.92.117.229
🇺🇸 162.216.149.47
🇺🇸 162.216.149.42
🇵🇰 151.123.240.126
🇨🇦 144.217.61.131
🇺🇸 195.184.76.20
🇨🇴 190.60.242.28
🇸🇪 171.25.193.78
🇵🇭 163.227.87.133
🇺🇸 162.216.149.34
🇺🇸 162.216.149.3
🇺🇸 152.232.239.226
🇫🇮 147.185.133.34
🇳🇱 144.124.254.249
🇩🇪 139.162.146.220
🇺🇸 137.184.13.100
🇺🇸 71.6.134.229
feedback