148.222.222.2

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
72% Elevated
25 reports
22 reporters · latest 1 day ago
ISP
Starlink Argentina SRL
Usage Type
Fixed Line ISP
ASN
AS14593
Hostname(s)
customer.bnssarg1.isp.starlink.com
Domain Name
starlink.com
Country
🇦🇷 Argentina
City
Buenos Aires, Buenos Aires F.D.
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 4 🇦🇹 Austria 2 🇩🇪 Germany 2
Most common categories Port Scan 13 SSH 4 Hacking 3 Brute-Force 3 IoT Targeted 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 RAP
2026-11-09 21:38:49 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇯🇵 Kinsei Engineering Inc.
UFW:High-frequency access to non-released SSH or Telnet ports
SSH Port Scan
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 43 | Len: 60B | Win: 65535(1) | rDNS: customer.bnssarg1.isp.starlink.com | F2B/ufw-honeypot@2026-11-09T18:11:27Z
Port Scan Hacking
🇧🇷 somosbr
[2026-11-04T14:28:40Z] Unsolicited scan from 148.222.222.2 to port 22/tcp
Port Scan
🇹🇷 savasboluk
Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-11-04 02:58
SSH Brute-Force
Anonymous
denied Telnet access attempt. destination port 23.
Port Scan Brute-Force
🇺🇸 MPL
tcp ports: 23,22 (6 or more attempts)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 51039 TTL: 48 Packet length: 60 TOS: 0x00 This report (for 148.222.222.2) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇦🇹 joe-abuse
Honeypot: 6 unsolicited connection attempt(s) to ports where no service is offered (22/tcp, 23/tcp); first 2026-11-02 18:42:59 UTC, last 2026-11-02 18:43:01 UTC. Reported by ipdb-security/fitzgerald.eu
Port Scan SSH IoT Targeted
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
Port Scan
🇦🇺 foobax
closed the connection from port 46812
SSH Port Scan
🇲🇽 octageeks.com
Wordpress malicious attack:[octawpauthor]
Web App Attack
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking
🇺🇸 RAP
2026-09-20 00:24:14 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 103.62.238.130
🇺🇸 34.234.206.30
🇨🇳 14.17.59.195
🇨🇳 223.78.122.108
🇺🇸 104.34.197.31
🇩🇪 94.26.106.148
🇵🇱 81.162.214.62
🇺🇸 76.171.9.18
🇺🇸 70.167.235.149
🇺🇸 68.225.62.179
🇷🇺 46.191.191.181
🇵🇪 45.170.50.2
🇬🇧 213.166.84.49
🇧🇷 205.210.31.211
🇲🇦 196.117.122.247
🇳🇱 185.223.235.10
🇪🇸 185.74.240.188
🇳🇱 158.173.21.151
🇮🇳 122.165.162.117
🇨🇳 113.24.225.99
feedback