165.245.223.149
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
35 from
28 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 gu-alvareza |
Nmap.Script.Scanner
|
Port Scan | |
| 🇨🇦 Luhte |
Unauthorised SSH/Telnet login attempt with user "" at 2026-11-01T01:43:41Z
|
Brute-Force SSH | |
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 165.245.223.149 to port 22 (ger-01) [SSH]
|
Exploited Host | |
| 🇫🇷 Kejult |
Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activity observed.
|
Hacking | |
| 🇺🇸 gu-alvareza |
Nmap.Script.Scanner
|
Port Scan | |
| 🇦🇪 abusiveIntelligence |
RDP connect attempt: Nmap Scanner
|
Brute-Force | |
| 🇸🇮 administrator |
|
Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 30 payload-bearing connection/event(s), 1593 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 18789.
|
Port Scan Hacking | |
| 🇩🇪 paissangroup |
Multiple WAF Violations
|
Web App Attack | |
| 🇺🇸 Carltonfsck |
165.245.223.149 - - [30/Oct/2026:21:23:33 +0000] "GET / HTTP/1.0" 400 402
165.245.223.149 - - [30/Oct/2026:21:23:34 +0000] "GET / HTTP/1.0" 400 402
165.245.223.149 - - [30/Oct/2026:21:23:34 +0000] "GET / HTTP/1.0" 400 402
...
|
Hacking Brute-Force | |
| 🇩🇪 ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 IndigoRidge |
Knock-Knock TNET honeypot activity; time=2026-10-30 05:45:22; username=HELP
|
Brute-Force | |
| Anonymous |
8086/tcp (1 or more attempts)
|
Port Scan | |
| 🇧🇾 hbars.by |
|
Brute-Force | |
| Anonymous |
Automated vulnerability scanning.
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown