JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 204.168.231.22

204.168.231.22 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 72%: ?

72%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.22.231.168.204.clients.your-server.de
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 204.168.231.22

Whois 204.168.231.22

IP Abuse Reports for 204.168.231.22:

This IP address has been reported a total of 34 times from 33 distinct sources. 204.168.231.22 was first reported on May 20th 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 StatsMe	2026-05-20 22:55:07 (4 weeks ago)	2026-05-20T19:15:13.997192+0300 ET SCAN NMAP -sS window 1024	Port Scan
🇩🇪 Justin F. \| AS204464	2026-05-20 18:06:23 (4 weeks ago)	2026-05-20T20:03:54.230795+02:00 vpn sshd-session[20380]: pam_unix(sshd:auth): authentication failur ... show more 2026-05-20T20:03:54.230795+02:00 vpn sshd-session[20380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.168.231.22 2026-05-20T20:03:56.846668+02:00 vpn sshd-session[20380]: Failed password for invalid user nair from 204.168.231.22 port 58610 ssh2 2026-05-20T20:05:09.970395+02:00 vpn sshd-session[20437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.168.231.22 user=root 2026-05-20T20:05:12.056758+02:00 vpn sshd-session[20437]: Failed password for root from 204.168.231.22 port 53864 ssh2 2026-05-20T20:06:22.692320+02:00 vpn sshd-session[20517]: Invalid user do from 204.168.231.22 port 54852 ... show less	Brute-Force SSH
🇭🇰 bluecloudwork	2026-05-20 18:04:23 (4 weeks ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
Anonymous	2026-05-20 17:51:08 (4 weeks ago)	Port Scan	Port Scan
🇮🇪 RoboSOC	2026-05-20 17:41:35 (4 weeks ago)	Port 22 Scan, PTR: None	Port Scan
Anonymous	2026-05-20 17:40:54 (4 weeks ago)	Drop from IP address 204.168.231.22 to tcp-port 18622	Port Scan
🇳🇱 tmiland	2026-05-20 17:36:43 (4 weeks ago)	(sshd) Failed SSH login from 204.168.231.22 (DE/Germany/static.22.231.168.204.clients.your-server.de ... show more (sshd) Failed SSH login from 204.168.231.22 (DE/Germany/static.22.231.168.204.clients.your-server.de): 3 in the last 3600 secs; IP: 204.168.231.22; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: 2026-05-20T19:27:37.816326+02:00 vps1 sshd-session[214781]: Invalid user minh from 204.168.231.22 port 47492 2026-05-20T19:34:20.942959+02:00 vps1 sshd-session[217144]: Invalid user hui from 204.168.231.22 port 54176 2026-05-20T19:36:41.792195+02:00 vps1 sshd-session[217975]: Invalid user yu from 204.168.231.22 port 35496 show less	SSH Brute-Force
🇺🇸 xmission.com	2026-05-20 17:31:06 (4 weeks ago)	Blocked by UFW (TCP on 18622) Source port: 52339 TTL: 234 Packet length: 40 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 18622) Source port: 52339 TTL: 234 Packet length: 40 TOS: 0x00 This report (for 204.168.231.22) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 NetWatch	2026-05-20 17:27:34 (4 weeks ago)	The IP 204.168.231.22 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇩🇪 kranem	2026-05-20 17:06:46 (4 weeks ago)	May 20 18:59:20 NODE-1 sshd[207250]: Disconnected from authenticating user root 204.168.231.22 port ... show more May 20 18:59:20 NODE-1 sshd[207250]: Disconnected from authenticating user root 204.168.231.22 port 43188 [preauth] May 20 19:04:20 NODE-1 sshd[306123]: Disconnected from authenticating user root 204.168.231.22 port 49566 [preauth] May 20 19:05:31 NODE-1 sshd[329618]: Invalid user fu from 204.168.231.22 port 34524 May 20 19:05:31 NODE-1 sshd[329618]: Disconnected from invalid user fu 204.168.231.22 port 34524 [preauth] May 20 19:06:45 NODE-1 sshd[353154]: Invalid user tencent from 204.168.231.22 port 47856 ... show less	Brute-Force SSH
🇫🇷 dsl	2026-05-20 17:05:40 (4 weeks ago)	May 20 17:05:37 dabeau sshd[20986]: Invalid user fu from 204.168.231.22 port 33226 May 20 17:05:37 d ... show more May 20 17:05:37 dabeau sshd[20986]: Invalid user fu from 204.168.231.22 port 33226 May 20 17:05:37 dabeau sshd[20986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.168.231.22 May 20 17:05:39 dabeau sshd[20986]: Failed password for invalid user fu from 204.168.231.22 port 33226 ssh2 ... show less	Brute-Force SSH
🇫🇷 evvsk	2026-05-20 16:55:27 (4 weeks ago)	18622/tcp	Port Scan
🇫🇮 6kilowatti	2026-05-20 16:52:20 (4 weeks ago)	2026-05-20T19:52:19.536186+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-05-20T19:52:19.536186+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=204.168.231.22 DST=83.148.240.21 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=40454 PROTO=TCP SPT=52339 DPT=18622 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇿 lp	2026-05-20 16:49:00 (4 weeks ago)	SSH Brute force: 20 attempts were recorded from 204.168.231.22 2026-05-20T17:54:43+02:00 Invalid use ... show more SSH Brute force: 20 attempts were recorded from 204.168.231.22 2026-05-20T17:54:43+02:00 Invalid user jang from 204.168.231.22 port 60176 2026-05-20T17:58:38+02:00 Invalid user wechat from 204.168.231.22 port 41854 2026-05-20T17:59:58+02:00 Invalid user clouduser from 204.168.231.22 port 33292 2026-05-20T18:01:27+02:00 Disconnected from authenticating user root 204.168.231.22 port 55950 [preauth] 2026-05-20T18:03:00+02:00 Invalid user mima from 204.168.231.22 port 33490 2026-05-20T18:04:29+02:00 Disconnected from authenticating user root 204.168.231.22 port 42610 [preauth] 2026-05-20T18:05:51+02:00 Disconnected from authenticating user root 204.168.231.22 port 49888 [preauth] 2026-05-20T18:07:10+02:00 Invalid user admin from 204.168.231.22 port 34198 2026-05-20T18:08:33+02:00 Disconnected from authenticating user root 204.168.231.22 port 42086 [preauth] 2026-05-20T18:09:59+02:00 Invalid show less	Brute-Force SSH
🇵🇱 sefinek.net	2026-05-20 16:39:10 (4 weeks ago)	Honeypot hit: Empty payload (likely service probe); 18622 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 18622 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a10:4646:190::fa2:c3fa

🇺🇸 216.25.89.97

🇨🇱 186.179.81.180

🇮🇷 178.216.249.206

🇺🇸 172.208.65.126

🇳🇱 158.94.209.107

🇮🇩 103.164.173.66

🇹🇷 91.93.238.29

🇳🇱 91.92.40.12

🇷🇴 80.94.92.167

🇺🇸 76.156.213.96

🇺🇸 54.92.217.65

🇳🇱 46.151.178.13

🇬🇧 35.203.211.125

🇭🇰 8.218.244.167

🇰🇷 218.149.228.149

🇺🇸 216.73.216.219

🇹🇼 198.235.24.110

🇩🇪 193.124.20.234

🇲🇽 187.205.29.67