JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.245.245.126

165.245.245.126 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.245.245.126

Whois 165.245.245.126

IP Abuse Reports for 165.245.245.126:

This IP address has been reported a total of 65 times from 50 distinct sources. 165.245.245.126 was first reported on April 24th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 banankicks	2026-06-23 16:49:47 (2 days ago)	Unauthorized connection attempt detected from IP address 165.245.245.126 to port 22 (banankicks-serv ... show more Unauthorized connection attempt detected from IP address 165.245.245.126 to port 22 (banankicks-server) [g] show less	Brute-Force Exploited Host
🇫🇷 Thaliruth	2026-06-23 07:26:29 (3 days ago)	Jun 23 09:26:26 151 dovecot: pop3-login: Login aborted: Connection closed: read(size=1026) failed: C ... show more Jun 23 09:26:26 151 dovecot: pop3-login: Login aborted: Connection closed: read(size=1026) failed: Connection reset by peer (no auth attempts in 0 secs) (no_auth_attempts): user=<>, rip=165.245.245.126, lip=46.252.194.151, session=<YCNKreZU6+6l9fV+> Jun 23 09:26:28 151 dovecot: pop3-login: Login aborted: Connection closed (no auth attempts in 0 secs) (no_auth_attempts): user=<>, rip=165.245.245.126, lip=46.252.194.151, session=<vEhireZUARul9fV+> ... show less	Hacking Brute-Force
🇩🇪 Marc	2026-06-23 06:33:00 (3 days ago)	2026-06-23T08:32:59.566942+02:00 mx1 postfix/submission-relay/smtpd[133361]: improper command pipeli ... show more 2026-06-23T08:32:59.566942+02:00 mx1 postfix/submission-relay/smtpd[133361]: improper command pipelining after CONNECT from unknown[165.245.245.126]: EHLO 2026-06-23T08:32:59.577679+02:00 mx1 postfix/submission-relay/smtpd[133361]: improper command pipelining after CONNECT from unknown[165.245.245.126]: HELP 2026-06-23T08:32:59.588846+02:00 mx1 postfix/submission-relay/smtpd[133361]: improper command pipelining after CONNECT from unknown[165.245.245.126]: GET / HTTP/1.0 show less	Brute-Force Email Spam
🇩🇪 ghostwarriors	2026-06-22 22:50:27 (3 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇦🇪 abusiveIntelligence	2026-06-22 15:20:00 (4 days ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇺🇸 gu-alvareza	2026-06-22 07:05:12 (4 days ago)	Nmap.Script.Scanner	Port Scan
🇫🇷 Kraften	2026-06-22 00:04:25 (4 days ago)	Dovecot imap-login ...	DDoS Attack Brute-Force
🇩🇪 Phenix Info	2026-06-21 10:32:12 (5 days ago)	SmallGuard.fr/Prestashop Empty User Agent	Web App Attack
🇫🇷 Thaliruth	2026-06-20 23:28:38 (5 days ago)	Jun 21 01:28:37 151 postfix/smtpd[3115562]: lost connection after CONNECT from unknown[165.245.245.1 ... show more Jun 21 01:28:37 151 postfix/smtpd[3115562]: lost connection after CONNECT from unknown[165.245.245.126] ... show less	Hacking Brute-Force
🇦🇹 Pingger Shikkoken	2026-06-20 19:51:41 (5 days ago)	2026-06-20T19:51:41+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-06-20T19:51:41+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=165.245.245.126 DST=10.1.1.14 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=58578 DF PROTO=TCP SPT=30353 DPT=465 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-20T19:51:41+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=165.245.245.126 DST=10.1.1.14 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=63763 DF PROTO=TCP SPT=37381 DPT=465 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Email Spam Hacking
🇩🇰 castipo	2026-06-20 14:48:25 (6 days ago)	nginx-botsearch :: 165.245.245.126 - - [20/Jun/2026:21:48:25 +0700] "GET /HNAP1 HTTP/1.1" 403 146 "- ... show more nginx-botsearch :: 165.245.245.126 - - [20/Jun/2026:21:48:25 +0700] "GET /HNAP1 HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; Odin; https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	Web App Attack Port Scan Hacking
🇺🇸 rscott.us	2026-06-18 17:00:07 (1 week ago)	Brute force SSH login attempts.	Brute-Force SSH
Anonymous	2026-06-18 16:03:12 (1 week ago)	2026-06-18T18:03:02.308878+02:00 server4 sshd[10976]: refused connect from 165.245.245.126 (165.245. ... show more 2026-06-18T18:03:02.308878+02:00 server4 sshd[10976]: refused connect from 165.245.245.126 (165.245.245.126) 2026-06-18T18:03:06.202308+02:00 server4 sshd[10977]: refused connect from 165.245.245.126 (165.245.245.126) 2026-06-18T18:03:11.264662+02:00 server4 sshd[10978]: refused connect from 165.245.245.126 (165.245.245.126) ... show less	Brute-Force SSH
🇺🇸 Xarcotic	2026-06-18 15:55:48 (1 week ago)	SSH login on honeypot.	Brute-Force SSH
🇩🇪 guldkage	2026-06-18 15:54:38 (1 week ago)	Unauthorized connection attempt detected from IP address 165.245.245.126 to port 445 (ger-03) [I]	Brute-Force Exploited Host

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.202

🇪🇬 197.49.191.177

🇲🇩 185.164.81.156

🇮🇳 182.95.186.138

🇳🇬 165.154.11.140

🇭🇰 152.32.169.7

🇨🇦 85.217.149.27

🇨🇳 39.154.11.22

🇹🇼 198.235.24.27

🇲🇽 187.254.21.215

🇺🇦 176.103.4.186

🇺🇸 172.216.11.11

🇨🇳 163.142.232.211

🇮🇩 114.10.39.2

🇰🇷 112.216.129.27

🇰🇪 102.222.145.79

🇳🇬 102.88.137.213

🇮🇹 94.33.82.114

🇫🇷 85.217.140.41

🇮🇷 85.198.19.251