JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.212.57.91

199.212.57.91 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 91%: ?

91%

ISP	Zhengzhou, a Dream Computer Technology Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136038
Domain Name	allcloud.cc
Country	🇭🇰 Hong Kong
City	Tung Chung, Islands

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.212.57.91

Whois 199.212.57.91

IP Abuse Reports for 199.212.57.91:

This IP address has been reported a total of 22 times from 20 distinct sources. 199.212.57.91 was first reported on October 8th 2026, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 IndigoRidge	2026-10-26 12:28:00 (21 hours ago)	Knock-Knock HTTP honeypot activity; time=2026-10-26 12:14:35; http_method=GET; http_path=/; http_pur ... show more Knock-Knock HTTP honeypot activity; time=2026-10-26 12:14:35; http_method=GET; http_path=/; http_purpose=basic_probe; http_user_agent=Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 S show less	Web App Attack
🇫🇷 arteagasoft	2026-10-26 08:53:47 (1 day ago)	2026-10-26T02:53:41.529226-06:00 2ce336a8e656 dovecot: imap-login: Login aborted: Connection closed ... show more 2026-10-26T02:53:41.529226-06:00 2ce336a8e656 dovecot: imap-login: Login aborted: Connection closed (disconnected during TLS handshake) (tls_handshake_not_finished): user=<>, rip=199.212.57.91, lip=192.168.30.250, TLS handshaking: Connection closed, session=<tnMxd7pe9tnH1Dlb> 2026-10-26T02:53:42.386988-06:00 2ce336a8e656 dovecot: pop3-login: Login aborted: Connection closed (no auth attempts in 0 secs) (no_auth_attempts): user=<>, rip=199.212.57.91, lip=192.168.30.250, TLS: Connection closed, session=<Y3GBd7pe3MbH1Dlb> 2026-10-26T02:53:46.109527-06:00 2ce336a8e656 dovecot: pop3-login: Login aborted: Connection closed (no auth attempts in 1 secs) (no_auth_attempts): user=<>, rip=199.212.57.91, lip=192.168.30.250, TLS, session=<gLu0d7peqrHH1Dlb> ... show less	Brute-Force
🇺🇸 3rdKey	2026-10-26 04:44:02 (1 day ago)	OpenCanary honeypot hit on port 443 (no legitimate service runs there); logtype 3000. Automated repo ... show more OpenCanary honeypot hit on port 443 (no legitimate service runs there); logtype 3000. Automated report. show less	Port Scan Web App Attack
🇺🇸 drewf.ink	2026-10-25 15:53:45 (1 day ago)	[15:53] Connected to PostgreSQL honeypot	Brute-Force Hacking
🇬🇧 Hobby Bob	2026-10-24 23:44:43 (2 days ago)	Oct 25 00:44:43 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 sec ... show more Oct 25 00:44:43 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=199.212.57.91, lip=X.X.X.X session= show less	Port Scan Hacking
🇺🇸 kosada.com	2026-10-24 20:10:06 (2 days ago)	Repeated requests for suspicious nonexistent URLs, for example: /favicon.ico (HTTP/1.1 port 443, bog ... show more Repeated requests for suspicious nonexistent URLs, for example: /favicon.ico (HTTP/1.1 port 443, bogus vhost, user agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36") show less	Web App Attack
🇺🇸 drewf.ink	2026-10-23 22:34:38 (3 days ago)	[22:34] Connected to RDP honeypot	Brute-Force Hacking
🇺🇸 drewf.ink	2026-10-23 22:06:17 (3 days ago)	[22:06] Connected to PostgreSQL honeypot	Brute-Force Hacking
🇺🇸 LSPCCU	2026-10-23 16:07:00 (3 days ago)	TSEC Honeypot Network report. Threat score: 74/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 74/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: galah. Context: 199.212.57.91 classified as automated brute-force attacker targeting SSH/Telnet credentials (high confidence). show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇺🇸 NXTwoThou	2026-10-20 19:53:23 (6 days ago)	IMAP	Port Scan
🇫🇷 agroman93	2026-10-20 05:16:27 (1 week ago)	T-Pot honeypot: 7 hits on ports [443] (automated)	Port Scan Web App Attack
Anonymous	2026-10-17 12:21:26 (1 week ago)	Web scanning: repeated requests for files and exploit paths this site does not serve (.env, .git, ph ... show more Web scanning: repeated requests for files and exploit paths this site does not serve (.env, .git, phpunit, cgi-bin). Reported by fail2ban. show less	Web App Attack
🇫🇷 Kejult	2026-10-16 11:04:14 (1 week ago)	Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 3 application-level events across 2 ... show more Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 3 application-level events across 2 source port(s). Sensor(s): Tanner. show less	Port Scan
🇺🇸 Bankbook8585	2026-10-15 07:45:38 (1 week ago)	T-Pot honeypot \| Dionaea honeypot: httpd	Port Scan Hacking
🇺🇸 chronos	2026-10-15 06:55:35 (1 week ago)	[AUTORAVALT][[15/10/2026 - 03:55:34 -03:00 UTC] Attack from [199.212.57.91]-[RANGE:199.212.57.0 - 19 ... show more [AUTORAVALT][[15/10/2026 - 03:55:34 -03:00 UTC] Attack from [199.212.57.91]-[RANGE:199.212.57.0 - 199.212.57.127] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> ] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 45.119.81.156

🇩🇪 23.132.164.170

🇮🇷 2.180.128.201

🇺🇸 2a10:7b00:e895:3cb7:55ef:1f4c:d920:bca

🇺🇸 199.165.159.193

🇲🇽 187.190.35.163

🇦🇷 186.39.93.41

🇷🇺 176.118.214.87

🇺🇸 136.107.254.221

🇵🇰 111.92.157.210

🇬🇧 89.37.172.134

🇮🇶 65.20.226.43

🇩🇪 47.254.154.160

🇧🇪 34.156.111.52

🇦🇿 31.171.49.109

🇺🇸 23.19.231.52

🇺🇸 2a10:4a01:56ba:2d35:dd6b:7fd8:1696:f404

🇵🇦 191.101.96.254

🇺🇸 185.226.198.48

🇮🇳 154.84.242.118