JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.232.175.164

165.232.175.164 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	1500536.cloudwaysapps.com
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.232.175.164

Whois 165.232.175.164

IP Abuse Reports for 165.232.175.164:

This IP address has been reported a total of 32 times from 18 distinct sources. 165.232.175.164 was first reported on March 6th 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 securejdprop	2025-06-09 15:54:43 (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 165.232.175.164 pe ... show more This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 165.232.175.164 performed 'crowdsecurity/http-bad-user-agent' (2 events over 199.424187ms) at 2025-06-09 15:54:42.089809761 +0000 UTC show less	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2025-06-09 15:13:00 (1 year ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇮🇩 hermawan	2025-06-09 14:19:46 (1 year ago)	[Mon Jun 09 21:19:15.085016 2025] [security2:error] [pid 1147352:tid 139881391978176] [client 165.23 ... show more [Mon Jun 09 21:19:15.085016 2025] [security2:error] [pid 1147352:tid 139881391978176] [client 165.232.175.164:64062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 request_line = GET /un.php HTTP/1.1 Request URI RAW = /un.php Request Basename = un.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.14.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag ... show less	Hacking Web App Attack
🇺🇸 ipblock.com	2025-06-09 12:44:00 (1 year ago)	IPBlock protected site ID [4055-d][s=06]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇮🇩 Incidents Response Neptus Team	2025-06-09 11:37:00 (1 year ago)	Report Abuse IP	Hacking Exploited Host Web App Attack
🇺🇸 mawan	2025-06-09 06:01:54 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇨🇭 backslash	2025-06-09 05:16:15 (1 year ago)		Bad Web Bot
🇺🇸 ipblock.com	2025-06-08 21:20:00 (1 year ago)	IPBlock protected site ID [4055-d][s=04]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-06-08 19:53:07 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 165.232.175.164 (SG/Singapore/-): 1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 165.232.175.164 (SG/Singapore/-): 1 in the last 3600 secs show less	Web App Attack
🇲🇾 Rizzy	2025-06-08 17:12:58 (1 year ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇮🇩 securejdprop	2025-06-08 17:07:34 (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 165.232.175.164 pe ... show more This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 165.232.175.164 performed 'crowdsecurity/http-bad-user-agent' (2 events over 48.249864ms) at 2025-06-08 17:07:33.971611935 +0000 UTC show less	Bad Web Bot Web App Attack
Anonymous	2025-06-08 16:43:06 (1 year ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-login.php	Web App Attack
🇮🇩 securejdprop	2025-06-08 16:23:08 (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 165.232.175.164 pe ... show more This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 165.232.175.164 performed 'crowdsecurity/http-bad-user-agent' (2 events over 180.415813ms) at 2025-06-08 16:23:07.334418841 +0000 UTC show less	Bad Web Bot Web App Attack
🇮🇩 hermawan	2025-06-08 12:41:38 (1 year ago)	[Sun Jun 08 19:41:07.932421 2025] [security2:error] [pid 488020:tid 139880281654976] [client 165.232 ... show more [Sun Jun 08 19:41:07.932421 2025] [security2:error] [pid 488020:tid 139880281654976] [client 165.232.175.164:63294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 request_line = GET /un.php HTTP/1.1 Request URI RAW = /un.php Request Basename = un.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.14.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag ... show less	Hacking Web App Attack
🇮🇹 VHosting	2025-06-08 10:35:06 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 194.107.115.199

🇸🇬 129.212.234.164

🇮🇳 122.187.229.119

🇨🇳 119.98.135.69

🇨🇳 117.177.102.79

🇰🇷 115.71.233.62

🇻🇳 103.118.28.15

🇺🇸 66.132.224.92

🇳🇱 45.156.87.127

🇻🇳 42.116.202.242

🇭🇰 34.96.155.202

🇮🇪 18.201.145.77

🇨🇳 14.29.201.23

🇭🇰 190.92.230.203

🇻🇳 103.167.85.168

🇺🇸 66.187.5.19

🇮🇪 52.48.79.184

🇯🇵 8.209.238.100

🇲🇾 180.74.84.64

🇫🇮 173.194.98.23