JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.245.249.161

165.245.249.161 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.245.249.161

Whois 165.245.249.161

IP Abuse Reports for 165.245.249.161:

This IP address has been reported a total of 49 times from 35 distinct sources. 165.245.249.161 was first reported on May 25th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-04 03:56:15 (15 hours ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196) show less	Hacking
🇺🇸 donarev419	2026-06-04 01:51:37 (17 hours ago)	Port scan detected on port 631 (connection without data transfer)	Port Scan
🇳🇱 oisecnet	2026-06-03 21:01:54 (22 hours ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-06-03. 9 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-06-03. 9 requests from this IP. show less	Brute-Force Web App Attack SSH
🇺🇸 gu-alvareza	2026-06-03 07:05:29 (1 day ago)	Nmap.Script.Scanner	Port Scan
🇩🇪 london2038.com	2026-06-03 03:34:28 (1 day ago)	Probing for exploits 165.245.249.161 - - [03/Jun/2026:05:34:24 +0200] "GET /odinhttpcall1780457664 H ... show more Probing for exploits 165.245.249.161 - - [03/Jun/2026:05:34:24 +0200] "GET /odinhttpcall1780457664 HTTP/1.1" 422 0 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 165.245.249.161 - - [03/Jun/2026:05:34:24 +0200] "POST /sdk HTTP/1.1" 422 0 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" show less	Hacking Web App Attack
🇩🇪 licen777	2026-06-03 02:31:52 (1 day ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T02:30:53Z and 2026-06-0 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T02:30:53Z and 2026-06-03T02:31:52Z show less	Brute-Force SSH
Anonymous	2026-06-03 00:31:13 (1 day ago)	Hit honeypot r.	Port Scan Hacking Exploited Host
🇯🇵 HeliJP	2026-06-02 23:41:57 (1 day ago)	Identified as SPAM from IP address 165.245.249.161	Email Spam
🇬🇧 PeravixGroup	2026-06-02 18:31:43 (2 days ago)	Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ... show more Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud show less	FTP Brute-Force Brute-Force
🇫🇷 GabrielJST	2026-06-02 13:41:16 (2 days ago)	(sshd) Failed SSH login from 165.245.249.161 (DE/Germany/-)	Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-02 06:18:01 (2 days ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 CDiehl	2026-06-02 05:09:24 (2 days ago)	Jun 2 07:09:20 centrum sshd-session[13025]: Connection reset by 165.245.249.161 port 26099 [preauth ... show more Jun 2 07:09:20 centrum sshd-session[13025]: Connection reset by 165.245.249.161 port 26099 [preauth] Jun 2 07:09:23 centrum sshd-session[13030]: Connection closed by 165.245.249.161 port 10363 [preauth] ... show less	Brute-Force SSH
🇺🇸 chronos	2026-06-01 06:23:01 (3 days ago)	[AUTORAVALT][[01/06/2026 - 03:23:01 -03:00 UTC] Attack from [DigitalOcean, LLC] [165.245.249.161] Ac ... show more [AUTORAVALT][[01/06/2026 - 03:23:01 -03:00 UTC] Attack from [DigitalOcean, LLC] [165.245.249.161] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 donarev419	2026-05-30 03:51:18 (5 days ago)	Port scan detected on port 8086 (connection without data transfer)	Port Scan
🇩🇪 _ArminS_	2026-05-30 03:18:19 (5 days ago)	SP-Scan 47517:993 detected 2026.05.30 05:18:19 blocked until 2026.07.18 22:21:06	Port Scan

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 209.97.134.111

🇧🇪 198.235.24.252

🇪🇸 79.116.23.158

🇺🇸 66.132.172.238

🇲🇾 49.124.205.169

🇳🇱 45.148.10.157

🇮🇳 4.213.224.194

🇮🇶 212.237.119.146

🇫🇮 147.185.133.154

🇨🇳 120.235.58.48

🇨🇳 118.145.102.69

🇷🇴 80.94.92.182

🇬🇧 80.44.58.47

🇩🇪 46.249.99.46

🇨🇦 35.203.79.239

🇺🇸 2607:f8b0:4002:c00::12c

🇺🇸 195.184.76.213

🇫🇮 147.185.133.78

🇳🇱 80.61.63.86

🇪🇸 79.117.115.43