Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hessen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
165.227.138.87 attack
Sniffing for wp-login
2020-01-04 05:25:45
165.227.138.245 attack
May  3 08:37:28 server sshd\[25618\]: Invalid user www from 165.227.138.245
May  3 08:37:28 server sshd\[25618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.138.245
May  3 08:37:30 server sshd\[25618\]: Failed password for invalid user www from 165.227.138.245 port 53192 ssh2
...
2019-10-09 14:32:53
165.227.138.245 attack
Jul 13 21:29:24 home sshd[9307]: Invalid user jan from 165.227.138.245 port 60490
Jul 13 21:29:24 home sshd[9307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.138.245
Jul 13 21:29:24 home sshd[9307]: Invalid user jan from 165.227.138.245 port 60490
Jul 13 21:29:26 home sshd[9307]: Failed password for invalid user jan from 165.227.138.245 port 60490 ssh2
Jul 13 21:34:16 home sshd[9316]: Invalid user cali from 165.227.138.245 port 35348
Jul 13 21:34:16 home sshd[9316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.138.245
Jul 13 21:34:16 home sshd[9316]: Invalid user cali from 165.227.138.245 port 35348
Jul 13 21:34:18 home sshd[9316]: Failed password for invalid user cali from 165.227.138.245 port 35348 ssh2
Jul 13 21:38:36 home sshd[9339]: Invalid user openerp from 165.227.138.245 port 35312
Jul 13 21:38:36 home sshd[9339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos
2019-07-14 16:47:36
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       165.227.0.0 - 165.227.255.255
CIDR:           165.227.0.0/16
NetName:        DIGITALOCEAN-165-227-0-0
NetHandle:      NET-165-227-0-0-1
Parent:         NET165 (NET-165-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   DigitalOcean, LLC (DO-13)
RegDate:        2016-10-06
Updated:        2020-04-03
Comment:        Routing and Peering Policy can be found at https://www.as14061.net
Comment:        
Comment:        Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref:            https://rdap.arin.net/registry/ip/165.227.0.0



OrgName:        DigitalOcean, LLC
OrgId:          DO-13
Address:        105 Edgeview Drive, Suite 425
City:           Broomfield
StateProv:      CO
PostalCode:     80021
Country:        US
RegDate:        2012-05-14
Updated:        2025-04-11
Ref:            https://rdap.arin.net/registry/entity/DO-13


OrgTechHandle: NOC32014-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-646-827-4366 
OrgTechEmail:  noc@digitalocean.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN

OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName:   DigitalOcean Abuse
OrgAbusePhone:  +1-646-827-4366 
OrgAbuseEmail:  abuse@digitalocean.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/DIGIT19-ARIN

OrgNOCHandle: NOC32014-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-646-827-4366 
OrgNOCEmail:  noc@digitalocean.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 165.227.138.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56768
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;165.227.138.104.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026093000 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 30 18:00:50 CST 2026
;; MSG SIZE  rcvd: 108
Host info
Host 104.138.227.165.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.138.227.165.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
112.85.42.174 attackspambots
Aug  8 23:53:24 plex sshd[32374]: Failed password for root from 112.85.42.174 port 5820 ssh2
Aug  8 23:53:18 plex sshd[32374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174  user=root
Aug  8 23:53:21 plex sshd[32374]: Failed password for root from 112.85.42.174 port 5820 ssh2
Aug  8 23:53:24 plex sshd[32374]: Failed password for root from 112.85.42.174 port 5820 ssh2
Aug  8 23:53:27 plex sshd[32374]: Failed password for root from 112.85.42.174 port 5820 ssh2
2019-08-09 07:55:34
178.128.52.162 attack
2019-08-09T01:50:20.852915centos sshd\[2725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.52.162  user=root
2019-08-09T01:50:22.333407centos sshd\[2725\]: Failed password for root from 178.128.52.162 port 55648 ssh2
2019-08-09T01:56:16.763140centos sshd\[2860\]: Invalid user legal3 from 178.128.52.162 port 60446
2019-08-09 07:58:43
73.214.82.178 attack
fire
2019-08-09 08:30:25
62.234.109.203 attackspambots
Aug  8 22:52:19 debian sshd\[1848\]: Invalid user gertrude from 62.234.109.203 port 35692
Aug  8 22:52:19 debian sshd\[1848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.109.203
...
2019-08-09 08:33:31
85.233.32.85 attackspambots
fire
2019-08-09 08:14:33
110.52.210.178 attackbots
2019-08-08T21:53:20.658093abusebot-2.cloudsearch.cf sshd\[19396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.52.210.178  user=root
2019-08-09 07:59:09
185.204.135.119 attackbots
Aug  9 01:31:46 herz-der-gamer sshd[24066]: Invalid user death from 185.204.135.119 port 48532
...
2019-08-09 08:01:30
182.127.1.42 attackspambots
2019-08-08T21:52:36.143112abusebot-4.cloudsearch.cf sshd\[16357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.127.1.42  user=root
2019-08-09 08:23:51
5.135.198.62 attackbots
Aug  9 01:56:44 icinga sshd[12674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.198.62
Aug  9 01:56:46 icinga sshd[12674]: Failed password for invalid user backupadmin from 5.135.198.62 port 34976 ssh2
...
2019-08-09 08:19:14
104.248.1.14 attackspambots
Aug  8 22:53:29 mail sshd\[11879\]: Invalid user smbuser from 104.248.1.14 port 34714
Aug  8 22:53:29 mail sshd\[11879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.1.14
...
2019-08-09 07:53:45
86.170.34.68 attackspambots
fire
2019-08-09 08:13:20
93.104.215.94 attackbots
Synology admin brute-force
2019-08-09 08:29:14
68.183.34.81 attackspambots
Unauthorised access (Aug  9) SRC=68.183.34.81 LEN=40 TTL=247 ID=54321 TCP DPT=3389 WINDOW=65535 SYN
2019-08-09 08:16:36
74.129.23.72 attackbotsspam
fire
2019-08-09 08:29:55
73.143.57.102 attack
fire
2019-08-09 08:31:23

Recently Reported IPs

45.198.224.125 39.96.71.26 34.140.130.200 103.218.241.30
216.180.246.208 47.95.207.57 2.58.56.214 39.182.81.224
87.250.224.97 40.124.116.105 34.156.52.50 5.61.209.106
34.76.72.252 159.223.20.180 139.59.141.231 165.227.157.134
165.227.149.191 207.154.240.16 167.71.41.239 44.237.100.246