JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.232.114.23

165.232.114.23 was found in our database!

This IP was reported 357 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.232.114.23

Whois 165.232.114.23

IP Abuse Reports for 165.232.114.23:

This IP address has been reported a total of 357 times from 217 distinct sources. 165.232.114.23 was first reported on November 25th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 razvangheorghies	2026-08-12 21:17:32 (1 week ago)	Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ... show more Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.). Detected + blocked by fail2ban / nginx / firewall. Automated report. show less	Web App Attack Bad Web Bot
🇩🇪 razvangheorghies	2026-08-11 15:16:52 (1 week ago)	Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ... show more Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.). Detected + blocked by fail2ban / nginx / firewall. Automated report. show less	Web App Attack Bad Web Bot
🇩🇪 razvangheorghies	2026-08-10 09:16:20 (1 week ago)	Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ... show more Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.). Detected + blocked by fail2ban / nginx / firewall. Automated report. show less	Web App Attack Bad Web Bot
🇩🇪 ghostwarriors	2026-08-10 04:20:27 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 VentryShield	2026-08-09 21:03:52 (1 week ago)	p0t honeypot: unknown connection on port 445/tcp, 168 bytes received from client	Port Scan
🇮🇹 RaffOne	2026-08-09 12:22:30 (1 week ago)	SSH - Attempt to login using invalid or illegal credential	Brute-Force SSH
Anonymous	2026-08-09 09:53:04 (1 week ago)	Reported from Nginx log analysis 17. Log: 165.232.114.23 - - [09/Aug/2026:xx:xx:xx 0200] "GET / HTT ... show more Reported from Nginx log analysis 17. Log: 165.232.114.23 - - [09/Aug/2026:xx:xx:xx 0200] "GET / HTTP/1.0" xxx xxx "-" "-" "-" "DE Germany Frankfurt am Main" "AS14061" "DigitalOcean, LLC" \| 165.232.114.23 - - [09/Aug/2026:xx:xx:xx 0200] "OPTIONS / HTTP/1.0" xxx xxx "-" "-" "-" "DE Germany Frankfurt am Main" "AS14061" "DigitalOcean, LLC" \| 165.232.114.23 - - [09/Aug/2026:xx:xx:xx 0200] "GET /nice ports,/Trinity.txt.bak HTTP/1.0" xxx xxx "-" "-" "-" "DE Germany Frankfurt am Main" "AS14061" "DigitalOcean, LLC" \| 165.232.114.23 - - [09/Aug/2026:xx:xx:xx 0200] "\x00\x00\x07\x00\x08\x00\x03\x00\x04\x00\x05\x00\x06" xxx xxx "-" "-" "-" "DE Germany Frankfurt am Main" "AS14061" "DigitalOcean, LLC" \| 165.232.114.23 - - [09/Aug/2026:xx:xx:xx 0200] "" xxx xxx "-" "-" "-" "DE Germany Frankfurt am Main" "AS14061" "DigitalOcean, LLC" show less	Port Scan Brute-Force SSH
Anonymous	2026-08-09 05:59:56 (1 week ago)	[Sun Aug 09 07:59:55.186481 2026] [authz_core:error] [pid 24414] [client 165.232.114.23:12685] AH016 ... show more [Sun Aug 09 07:59:55.186481 2026] [authz_core:error] [pid 24414] [client 165.232.114.23:12685] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Aug 09 07:59:55.243515 2026] [access_compat:error] [pid 24409] [client 165.232.114.23:2437] AH01797: client denied by server configuration: /var/www/html/sdk [Sun Aug 09 07:59:55.243511 2026] [access_compat:error] [pid 24410] [client 165.232.114.23:21327] AH01797: client denied by server configuration: /var/www/html/odinhttpcall1786255195 ... show less	Web App Attack
🇩🇪 razvangheorghies	2026-08-09 03:15:59 (1 week ago)	Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ... show more Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.). Detected + blocked by fail2ban / nginx / firewall. Automated report. show less	Web App Attack Bad Web Bot
🇺🇸 ratcarcher-labs	2026-08-08 21:19:15 (1 week ago)	[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=75 attacks=8 depth=2 ... show more [Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=75 attacks=8 depth=2 node=node-us-east canary=no human_score=50 agentic=30 cc=DE asn=DigitalOcean, LLC \| Data provided by Ratcarcher Labs · https://ratcarcher-labs.com · docs https://api.ratcarcher-labs.com/api/v1/public/docs show less	Port Scan Bad Web Bot
🇮🇹 Inartis	2026-08-08 17:50:17 (1 week ago)	165.232.114.23 - - [08/Aug/2026:19:50:17 +0200] "GET /HNAP1 HTTP/1.1" 302 410 "-" "Mozilla/5.0 (comp ... show more 165.232.114.23 - - [08/Aug/2026:19:50:17 +0200] "GET /HNAP1 HTTP/1.1" 302 410 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Neosmith20	2026-08-08 13:00:35 (1 week ago)	Knock-Knock honeypot brute-force: SMB (1 total hits)	Brute-Force
🇵🇱 strefapi_com	2026-08-08 01:06:41 (1 week ago)	Brute-force or trying open relay ...	Brute-Force Web App Attack
🇩🇪 razvangheorghies	2026-08-07 23:03:09 (1 week ago)	Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ... show more Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.). Detected + blocked by fail2ban / nginx / firewall. Automated report. show less	Web App Attack Bad Web Bot
🇺🇸 KayCee	2026-08-07 22:14:20 (1 week ago)	165.232.114.23 - - [07/Aug/2026:18:14:19 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03!\x0B\x ... show more 165.232.114.23 - - [07/Aug/2026:18:14:19 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03!\x0B\xFFc&\xCF\x22\x9F#\xAE\xE0\xD8u\x8A\x14\xF4\xB5p\xFEan\xD3lI\x02&2\xB5pfh\x94 `\x871\xCE\xA6\x85\x07\xDC{+\x1B" 400 150 "-" "-" "-" 165.232.114.23 - - [07/Aug/2026:18:14:19 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\x8A\xBE\x17f\x0F\xEB\xACV\x1B\xAEt\xB6\xC92y\xED\xAF\xD1\xD6\x8B\x8A#\xFDS\x0B\xD1\x17\xF0" 400 150 "-" "-" "-" 165.232.114.23 - - [07/Aug/2026:18:14:19 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03S\x18JB\xBBh\x11\x97\xDC{\xD8{Z\xA4\x01Q~\xCD\x05\xEE\xC4\xC4\xE0W\xC6\x99\xB9[\xE2\xDF\x02 \x93\xE2\x08\x16j\xB5\xC9\xEA\xD1\xAA\xDA\xE9]\xF7\xB2{\x05\xD1\x9F\xBBB[Y\xF7\x93\x92\x8C\xBF\x19\xB0S\x00\x96\x13\x02\x13\x03\x13\x01\x003\x009\x005\x00/\xC0,\xC00\x00\xA3\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0\xAF\xC0\xAD\xC0\xA3\xC0\x9F\xC0]\xC0a\xC0W\xC0S\xC0+\xC0/\x00\xA2\x00\x9E\xC0\xAE\xC0\xAC\xC0\xA2\xC0\x9E\xC0\x5C\xC0`\xC0V\xC0R\xC0$\xC0(\x00k\x00j\xC0s\xC0w\x00\xC4 ... show less	Web App Attack

Showing 1 to 15 of 357 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.18

🇭🇰 199.45.155.70

🇨🇴 190.151.231.4

🇲🇽 189.155.234.12

🇩🇪 185.220.101.44

🇨🇱 181.42.131.236

🇫🇷 172.71.131.202

🇺🇸 162.216.149.156

🇬🇧 161.35.34.21

🇨🇳 112.229.159.106

🇮🇩 103.175.209.233

🇳🇱 89.248.165.203

🇳🇱 45.153.34.71

🇫🇮 35.228.29.89

🇺🇸 17.57.13.47

🇦🇺 216.226.77.30

🇱🇹 213.176.26.77

🇺🇸 195.184.76.115

🇳🇱 185.223.235.9

🇫🇷 172.71.131.201