Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 221.164.148.46
This IP address has been reported a total of
12
times from
11 distinct
sources.
221.164.148.46 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Canada
with 3
reports;
France
with 3
reports;
United States of America
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
6
times;
SSH
5
times;
Web App Attack
4
times;
FTP Brute-Force
1
time;
Port Scan
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-20T17:51:19.484162 socky.stom66.co.uk proftpd[2766810]: session[2766810] 0.0.0.0 (221.164.14 ...
show more2026-09-20T17:51:19.484162 socky.stom66.co.uk proftpd[2766810]: session[2766810] 0.0.0.0 (221.164.148.46[221.164.148.46]): USER admin: no such user found from 221.164.148.46 [221.164.148.46] to ::ffff:5.79.80.26:2222
...
show less
221.164.148.46 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 se ...
show more221.164.148.46 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 14 18:21:30 15216 sshd[21091]: Invalid user admin from 192.80.162.7 port 57149
Sep 14 18:21:32 15216 sshd[21091]: Failed password for invalid user admin from 192.80.162.7 port 57149 ssh2
Sep 14 18:28:52 15216 sshd[22626]: Invalid user admin from 105.159.164.98 port 48198
Sep 14 18:28:54 15216 sshd[22626]: Failed password for invalid user admin from 105.159.164.98 port 48198 ssh2
Sep 14 18:33:37 15216 sshd[23709]: Invalid user admin from 221.164.148.46 port 52288
IP Addresses Blocked:
192.80.162.7 (CA/Canada/192-80-162-7.dyn.novuscom.net)
105.159.164.98 (MA/Morocco/-)
show less
Triggered Cloudflare WAF (firewallCustom) from KR.
Action taken: BLOCK
Protocol: HTTP/2 (POST method ...
show moreTriggered Cloudflare WAF (firewallCustom) from KR.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
