AbuseIPDB » 222.252.107.44
222.252.107.44
This IP was reported 5 times. Confidence of
Abuse
is 4% : ?
ISP
Hanoi Post and Telecom Company
Usage Type
Fixed Line ISP
ASN
AS45899
Domain Name
vnpt-hanoi.com.vn
Country
🇻🇳
Viet Nam
City
Hanoi, Hanoi
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 222.252.107.44 :
This IP address has been reported a total of
5
times from
5 distinct
sources.
222.252.107.44 was first reported on
June 2nd 2022 , and the most recent report was
23 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-08 15:11:32
(23 hours ago)
Web app attack and vulnerability scan detected from IIS logs
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 03:49:54
(2 months ago)
(mod_security) mod_security (id:217210) triggered by 222.252.107.44 (static.vnpt.vn): 1 in the last ...
show more
(mod_security) mod_security (id:217210) triggered by 222.252.107.44 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 23:49:46.037974 2026] [security2:error] [pid 29385:tid 29385] [client 222.252.107.44:43494] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||moon61trades.xyz|F|4"] [data "GET http://moon61trades.xyz HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "moon61trades.xyz"] [uri "/"] [unique_id "aeroWkBeLoOm0omGBa_zogAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
www.elivecd.org
2026-04-22 16:40:18
(2 months ago)
222.252.107.44 - - [22/Apr/2026:17:33:13 +0100] "GET /newsletters/?reflect_670_month=6&reflect_670_y ...
show more
222.252.107.44 - - [22/Apr/2026:17:33:13 +0100] "GET /newsletters/?reflect_670_month=6&reflect_670_year=2008&reflect_670_day=false&reflect_670_start=0&reflect_420_month=8&reflect_420_year=2008&reflect_420_day=false&reflect_420_start=0&reflect_937_month=9&reflect_937_year=2008&reflect_937_day=false&reflect_937_start=0 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
DDoS Attack
2022-06-09 22:36:40
(4 years ago)
Unauthorized connection attempt from 222.252.107.44 to port 445/TCP
Port Scan
Hacking
🇺🇸
withfallback.com
2022-06-02 05:16:31
(4 years ago)
Attempted SMB login
Brute-Force
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: