This IP address has been reported a total of
12
times from
12 distinct
sources.
221.147.81.164 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
United States of America
with 3
reports;
Japan
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
11
times;
SSH
10
times;
FTP Brute-Force
1
time;
Exploited Host
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Oct 15 22:56:40 newage sshd[12532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreOct 15 22:56:40 newage sshd[12532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.147.81.164
Oct 15 22:56:42 newage sshd[12532]: Failed password for invalid user user from 221.147.81.164 port 43352 ssh2
...
show less
This IP address carried out 1 SSH credential attack (attempts) on 05-10-2026. For more information o ...
show moreThis IP address carried out 1 SSH credential attack (attempts) on 05-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
221.147.81.164 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 se ...
show more221.147.81.164 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 21 16:23:56 12525 sshd[13049]: Invalid user admin from 61.76.227.2 port 44164
Sep 21 16:23:58 12525 sshd[13049]: Failed password for invalid user admin from 61.76.227.2 port 44164 ssh2
Sep 21 16:33:31 12525 sshd[18127]: Invalid user admin from 221.147.81.164 port 33016
Sep 21 16:19:11 12525 sshd[10713]: Failed password for invalid user admin from 203.219.138.209 port 49135 ssh2
Sep 21 16:19:08 12525 sshd[10713]: Invalid user admin from 203.219.138.209 port 49135
IP Addresses Blocked:
61.76.227.2 (-)
show less
2026-09-20 12:58:12,858 quad proftpd[4145899] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (221.147.81.164[2 ...
show more2026-09-20 12:58:12,858 quad proftpd[4145899] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (221.147.81.164[221.147.81.164]): USER admin: no such user found from 221.147.81.164 [221.147.81.164] to 2.56.97.107:22
show less
Sep 18 15:41:42 internal-mail-rafled-com sshd[3391993]: Invalid user admin from 221.147.81.164 port ...
show moreSep 18 15:41:42 internal-mail-rafled-com sshd[3391993]: Invalid user admin from 221.147.81.164 port 54098
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-09-09T21:27:22.709576 socky.stom66.co.uk proftpd[1985714]: session[1985714] 0.0.0.0 (221.147.81 ...
show more2026-09-09T21:27:22.709576 socky.stom66.co.uk proftpd[1985714]: session[1985714] 0.0.0.0 (221.147.81.164[221.147.81.164]): USER supervisor: no such user found from 221.147.81.164 [221.147.81.164] to ::ffff:5.79.80.26:2222
...
show less
systemd timer sync; fail2ban jail=sshd host=tk ip=221.147.81.164; evidence=fail2ban log NOTICE Ban e ...
show moresystemd timer sync; fail2ban jail=sshd host=tk ip=221.147.81.164; evidence=fail2ban log NOTICE Ban event
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credential used: admin:admin ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credential used: admin:admin
• Number of login attempts: 1
• Client: SSH-2.0-Go
show less
SSH
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
