JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 222.104.205.147

222.104.205.147 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 38%: ?

38%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Daegu, Daegu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 222.104.205.147

Whois 222.104.205.147

IP Abuse Reports for 222.104.205.147:

This IP address has been reported a total of 11 times from 10 distinct sources. 222.104.205.147 was first reported on April 6th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-09-20 10:55:19 (1 hour ago)	Scanning for web/db/file exploits on creall.com	SQL Injection Bad Web Bot Web App Attack
🇺🇸 seraph.ws	2026-09-19 01:49:24 (1 day ago)	SSH honeypot contact — automated credential stuffing attempt	Brute-Force SSH
🇺🇸 bigscoots.com	2026-09-15 07:38:51 (5 days ago)	222.104.205.147 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 222.104.205.147 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 15 02:34:40 10231 sshd[1823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.251.202.50 user=root Sep 15 02:34:42 10231 sshd[1823]: Failed password for root from 160.251.202.50 port 55030 ssh2 Sep 15 02:38:36 10231 sshd[4206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.104.205.147 user=root Sep 15 02:16:33 10231 sshd[23476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.180.203.84 user=root Sep 15 02:16:35 10231 sshd[23476]: Failed password for root from 121.180.203.84 port 51138 ssh2 IP Addresses Blocked: 160.251.202.50 (JP/Japan/v160-251-202-50.1prz.static.cnode.jp) show less	Brute-Force SSH
🇨🇳 SA19999	2026-09-14 03:14:47 (6 days ago)	Auto-report: brute_force \| sources=["peer-sync"] \| Fox honeypot cluster	Web App Attack
🇺🇸 bigscoots.com	2026-09-07 23:11:17 (1 week ago)	222.104.205.147 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 s ... show more 222.104.205.147 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 7 18:10:49 14474 sshd[29378]: Invalid user admin from 121.172.186.1 port 39896 Sep 7 18:05:34 14474 sshd[28644]: Invalid user admin from 222.104.205.147 port 39458 Sep 7 18:05:36 14474 sshd[28644]: Failed password for invalid user admin from 222.104.205.147 port 39458 ssh2 Sep 7 17:35:06 14474 sshd[24125]: Invalid user admin from 70.182.173.218 port 57886 Sep 7 17:35:09 14474 sshd[24125]: Failed password for invalid user admin from 70.182.173.218 port 57886 ssh2 IP Addresses Blocked: 121.172.186.1 (KR/South Korea/-) show less	Brute-Force SSH
🇨🇦 DRI	2026-08-31 09:07:52 (2 weeks ago)	Web attack/Malicious activity detected	Web App Attack
🇨🇭 backslash	2026-08-23 00:06:04 (4 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2026-08-19 16:34:02 (1 month ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 IDS	2026-05-08 03:11:04 (4 months ago)	2026-05-07T23:10:29.667423mail.idscp.com auth[2982248]: pam_unix(dovecot:auth): authentication failu ... show more 2026-05-07T23:10:29.667423mail.idscp.com auth[2982248]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=222.104.205.147 2026-05-07T23:10:33.413405mail.idscp.com dovecot[1489]: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=222.104.205.147, lip=173.219.81.58, TLS, session=<boQ7vUVRvNHeaM2T> 2026-05-07T23:10:39.809095mail.idscp.com auth[2982248]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=jopledge rhost=222.104.205.147 2026-05-07T23:10:44.210663mail.idscp.com dovecot[1489]: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 9 secs): user=<jopledge>, method=PLAIN, rip=222.104.205.147, lip=173.219.81.58, TLS, session=<t0SZvUVRxNHeaM2T> 2026-05-07T23:11:03.521029mail.idscp.com auth[2982248]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dove ... show less	Brute-Force Web App Attack
🇳🇱 wlt-blocker	2026-04-26 14:48:27 (4 months ago)	Attempts to login to mail server with wrong username and/or password	Brute-Force
🇨🇦 polycoda	2026-04-06 01:32:55 (5 months ago)	AutoBlock: 📂 Directory Listings (Decay-Based) - 📊 Admin Panel Scanning (Decay-Based) - ❌ Excessive 4 ... show more AutoBlock: 📂 Directory Listings (Decay-Based) - 📊 Admin Panel Scanning (Decay-Based) - ❌ Excessive 40X Errors (Decay-Based) show less	Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 197.153.57.103

🇺🇸 172.71.223.105

🇬🇧 154.16.44.88

🇮🇳 135.235.138.43

🇳🇱 77.239.124.112

🇺🇸 73.57.80.193

🇺🇸 65.181.112.168

🇩🇪 2a01:4020:31:0:102::10

🇺🇸 192.178.11.96

🇮🇶 169.224.3.106

🇰🇷 125.143.249.212

🇺🇸 70.166.140.159

🇺🇸 66.132.172.144

🇨🇳 36.135.62.89

🇨🇭 34.65.14.143

🇺🇸 34.24.51.203

🇺🇸 20.80.76.95

🇫🇮 147.185.133.223

🇺🇸 136.69.134.134

🇷🇺 80.253.31.232