176.120.22.205

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
58 reports
55 reporters · latest 6 days ago
ISP
Proton66 OOO
Usage Type
Data Center/Web Hosting/Transit
ASN
AS198953
Domain Name
proton66.ru
Country
🇷🇺 Russian Federation
City
Saint Petersburg, St. Petersburg
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
58 from 55 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 15 🇫🇷 France 10 🇳🇱 Netherlands 9
Most common categories Web App Attack 36 Port Scan 21 Hacking 17 Brute-Force 10 Bad Web Bot 8
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇪🇸 Gem
Unauthorized web scan.
Web App Attack
🇳🇱 JCB
176.120.22.205 - - [05/Nov/2026:23:31:15 +0200] "GET /RDWeb/Pages/en-US/login.aspx HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
Web App Attack
🇳🇱 JCB
176.120.22.205 - - [05/Nov/2026:22:59:54 +0200] "GET /RDWeb/Pages/en-US/login.aspx HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
Web App Attack
🇫🇷 service Informatique
GET /RDWeb
Web App Attack
🇨🇭 copestack
Honeypot hit on ov-4e5936 (fail2ban jail: nginx-compat)
Web App Attack
🇷🇺 dnsbd.tech
nftables: Port scan (TCP:443) [srv1]
Port Scan Hacking
🇪🇸 raiolanetworks.com
Honeypot detection: web application attack. 3 events observed. Reported automatically from a honeypot sensor.
Web App Attack
🇺🇸 LSPCCU
Port Scan Hacking Brute-Force Web App Attack SSH
Anonymous
Port Scan Brute-Force SSH
🇳🇱 oisecnet
Automated report: Unauthorized vulnerability scanning detected on 2026-11-05. 1 requests from this IP.
Port Scan Hacking Web App Attack
🇫🇮 mnazibo
SQL Injection Brute-Force Bad Web Bot
🇫🇷 Julien Marcelli
Web application attack detected: scan
Bad Web Bot Web App Attack
🇩🇪 kkeyser
GET /RDWeb/Pages/en-US/login.aspx HTTP/1.1
Web App Attack
🇬🇧 myintarweb
176.120.22.205 - - [05/Nov/2026:21:31:11 +0000] 443 "GET /RDWeb/Pages/en-US/login.aspx HTTP/1.1" 404 31671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" ...
Hacking Bad Web Bot Web App Attack
🇩🇪 Progetto1
Detected via HAProxyScanner at 2026-11-05 21:30:01 UTC on destination port WEB (80/443). Repeated scan / connection.
Port Scan Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇹 217.26.178.124
🇳🇱 86.38.187.36
🇬🇧 194.50.235.140
🇺🇦 193.32.21.192
🇺🇸 192.64.86.65
🇦🇷 190.177.175.83
🇺🇸 165.154.172.200
🇳🇱 89.21.67.190
🇳🇱 86.38.187.35
🇳🇱 86.38.187.29
🇨🇱 34.176.91.2
🇻🇪 181.233.89.72
🇩🇪 167.94.146.39
🇺🇸 162.216.150.87
🇮🇩 125.164.215.159
🇳🇱 86.38.187.253
🇳🇱 86.38.187.232
🇷🇴 80.94.92.179
🇳🇱 45.148.10.151
🇦🇺 35.244.95.136
feedback