JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.245.237.20

165.245.237.20 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 28%: ?

28%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.245.237.20

Whois 165.245.237.20

IP Abuse Reports for 165.245.237.20:

This IP address has been reported a total of 9 times from 7 distinct sources. 165.245.237.20 was first reported on April 21st 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-11 03:13:54 (2 weeks ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 MPL	2026-06-11 03:07:51 (2 weeks ago)	tcp/5173 (2 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-06-11 03:02:29 (2 weeks ago)	Blocked by UFW (TCP on 11000) Source port: 61013 TTL: 244 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 11000) Source port: 61013 TTL: 244 Packet length: 44 TOS: 0x08 This report (for 165.245.237.20) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-11 02:38:53 (2 weeks ago)	tcp/465 (2 or more attempts)	Port Scan
🇫🇷 centurion	2026-06-11 02:38:32 (2 weeks ago)	Blocked by UFW on dc00 [1133/tcp] Source port: 61004 TTL: 240 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on dc00 [1133/tcp] Source port: 61004 TTL: 240 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Cyber Crusader	2026-06-10 19:13:45 (2 weeks ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-04-21 02:31:12 (2 months ago)	Blocked by UFW (TCP on 8181) Source port: 61005 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8181) Source port: 61005 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 165.245.237.20) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ksol-hostmaster	2026-04-21 02:12:54 (2 months ago)	Apr 21 04:12:52 ksol dovecot[66775]: pop3-login: Disconnected: Disconnected: Too many bad commands ( ... show more Apr 21 04:12:52 ksol dovecot[66775]: pop3-login: Disconnected: Disconnected: Too many bad commands (no auth attempts in 1 secs): user=<>, rip=165.245.237.20, lip=127.0.0.181, TLS, session=<IRrX8+5PIrGl9e0U> Apr 21 04:12:52 ksol dovecot[66775]: pop3-login: Disconnected: Connection closed: read(size=597) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=165.245.237.20, lip=127.0.0.181, TLS handshaking: read(size=597) failed: Connection reset by peer, session=<otLf8+5PMrGl9e0U> Apr 21 04:12:52 ksol dovecot[66775]: pop3-login: Disconnected: Connection closed: read(size=597) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=165.245.237.20, lip=127.0.0.181, TLS handshaking: read(size=597) failed: Connection reset by peer, session=<B0rj8+5POLGl9e0U> Apr 21 04:12:53 ksol dovecot[66775]: pop3-login: Disconnected: Connection closed: read(size=676) failed: Connection reset by peer (no auth attempts in 1 secs): user=<>, rip=165.245.237.20, lip=12 ... show less	Brute-Force
🇺🇸 donarev419	2026-04-21 02:05:23 (2 months ago)	Connection to port 6000 with data transfer. Data preview: GET / HTTP/1.1 Host: 104.250.239.52 Conn ... show more Connection to port 6000 with data transfer. Data preview: GET / HTTP/1.1 Host: 104.250.239.52 Connection: keep-alive sec-ch-ua: "Chromium";v="142", "Not:A- show less	Port Scan Hacking

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.191.48.23

🇨🇳 171.213.145.239

🇳🇬 102.88.137.213

🇳🇱 93.123.72.183

🇩🇪 77.110.107.31

🇺🇸 74.82.47.4

🇺🇸 71.246.240.81

🇺🇸 66.132.195.25

🇻🇳 45.119.212.99

🇺🇸 208.109.38.143

🇻🇳 203.113.174.15

🇲🇽 189.194.140.170

🇺🇸 148.72.144.211

🇧🇪 130.211.108.6

🇧🇪 34.140.147.143

🇮🇳 20.219.1.207

🇺🇸 20.118.216.53

🇺🇸 20.65.195.30

🇩🇪 194.187.176.88

🇫🇮 185.148.1.18