JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 222.254.34.39

222.254.34.39 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 0%: ?

ISP	Ha Noi Post and Telecom Company
Usage Type	Mobile ISP
ASN	AS45899
Domain Name	hnpt.com.vn
Country	🇻🇳 Viet Nam
City	Thanh Liet, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 222.254.34.39

Whois 222.254.34.39

IP Abuse Reports for 222.254.34.39:

This IP address has been reported a total of 87 times from 44 distinct sources. 222.254.34.39 was first reported on September 7th 2021, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ne1for23	2025-12-21 04:53:44 (6 months ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 222.254.34.39 - - [21/Dec/2025:04:53:44 +0000] "GET /.env HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" "-" show less	Hacking
🇨🇳 ThreatBook.io	2025-12-15 23:23:52 (7 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/222.254.34.39 202 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/222.254.34.39 2025-12-15 04:42:34 /,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["/"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"]},"host":"1.92.129.36","method":"POST","proto":"HTTP/1.1","remote_addr":"222.254.34.39:42682","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"} 2025-12-15 04:42:33 /.env show less	Web App Attack
🇩🇪 DAUGDE	2025-12-03 06:26:12 (7 months ago)	2025-12-03T07:05:31.382559+01:00 v2202104133598150667 2aa0e766ddc4[546063]: Dec 3 07:05:31 2aa0e766 ... show more 2025-12-03T07:05:31.382559+01:00 v2202104133598150667 2aa0e766ddc4[546063]: Dec 3 07:05:31 2aa0e766ddc4 postfix/submission/smtpd[547]: lost connection after STARTTLS from unknown[222.254.34.39] 2025-12-03T07:26:11.802440+01:00 v2202104133598150667 2aa0e766ddc4[546063]: Dec 3 07:26:11 2aa0e766ddc4 postfix/submission/smtpd[721]: lost connection after STARTTLS from unknown[222.254.34.39] ... show less	Email Spam Spoofing Brute-Force
🇹🇷 rtbh.com.tr	2025-12-02 20:10:15 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 DAUGDE	2025-12-02 08:36:39 (7 months ago)	2025-12-02T08:20:01.581152+01:00 v2202104133598150667 2aa0e766ddc4[1258532]: Dec 2 08:20:01 2aa0e76 ... show more 2025-12-02T08:20:01.581152+01:00 v2202104133598150667 2aa0e766ddc4[1258532]: Dec 2 08:20:01 2aa0e766ddc4 postfix/smtps/smtpd[41075]: lost connection after CONNECT from unknown[222.254.34.39] 2025-12-02T09:30:35.715495+01:00 v2202104133598150667 2aa0e766ddc4[1258532]: Dec 2 09:30:35 2aa0e766ddc4 postfix/smtps/smtpd[41710]: lost connection after CONNECT from unknown[222.254.34.39] 2025-12-02T09:36:38.343503+01:00 v2202104133598150667 2aa0e766ddc4[1258532]: Dec 2 09:36:38 2aa0e766ddc4 postfix/smtps/smtpd[41734]: lost connection after CONNECT from unknown[222.254.34.39] ... show less	Email Spam Spoofing Brute-Force
🇩🇪 Pingger Shikkoken	2025-12-02 08:05:06 (7 months ago)	Dec 2 08:05:06 mail postfix/submission/smtpd[3317430]: NOQUEUE: reject: RCPT from unknown[222.254.3 ... show more Dec 2 08:05:06 mail postfix/submission/smtpd[3317430]: NOQUEUE: reject: RCPT from unknown[222.254.34.39]: 554 5.7.1 <unknown[222.254.34.39]>: Client host rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<atvr.domain> ... show less	Email Spam Port Scan Spoofing Brute-Force
🇩🇪 wsyq	2025-12-02 07:16:35 (7 months ago)	Fail2Ban - \[POSTFIX\]Dropped in one of \{SASL AUTH\},\{RBL\},\{DDOS\(PREGREET\)\},\{TWO MANY ERRORS ... show more Fail2Ban - \[POSTFIX\]Dropped in one of \{SASL AUTH\},\{RBL\},\{DDOS\(PREGREET\)\},\{TWO MANY ERRORS\},\{ADDRESS REJECTED\} ... show less	Hacking Spoofing
🇨🇦 polycoda	2025-11-18 20:06:16 (7 months ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)	Hacking Web App Attack
🇨🇳 ThreatBook.io	2025-10-29 22:54:23 (8 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/222.254.34.39 202 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/222.254.34.39 2025-10-29 04:46:34 /,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["/"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"]},"host":"220.171.66.6","method":"POST","proto":"HTTP/1.1","remote_addr":"222.254.34.39:42607","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"} 2025-10-29 04:46:34 /.env show less	Web App Attack
🇮🇪 thecivvie	2025-10-26 15:00:03 (8 months ago)	foomuuri firewall banned tcp/443 1 attempts	Brute-Force
🇺🇸 Ocean Ascents	2025-10-24 15:33:21 (8 months ago)	Probe for vulnerabilities. Path attempted: /.env	Web App Attack
Anonymous	2025-10-23 11:02:16 (8 months ago)	High Number of Destinations	Port Scan
🇺🇸 xmission.com	2025-10-22 13:28:10 (8 months ago)	Blocked by UFW (TCP on 80) Source port: 49337 TTL: 113 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 49337 TTL: 113 Packet length: 52 TOS: 0x00 This report (for 222.254.34.39) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 shabi	2025-10-22 13:23:56 (8 months ago)	UFW Blocked [80/TCP] Source: 222.254.34.39:42427 TTL: 111 Lenth: 52 TOS: 0x00	Port Scan Web App Attack
🇺🇸 technojoe99	2025-10-22 04:47:49 (8 months ago)	Exploit scan from 222.254.34.39. GET /.env HTTP/1.1.	Web App Attack

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 212.3.155.8

🇹🇼 198.235.24.71

🇪🇨 186.209.214.82

🇩🇪 185.137.164.19

🇰🇷 175.206.113.91

🇨🇦 172.69.130.203

🇳🇱 167.71.72.95

🇷🇺 147.45.48.17

🇨🇦 85.217.149.68

🇲🇳 66.181.171.136

🇰🇭 58.97.216.135

🇬🇧 35.203.210.117

🇬🇳 197.149.244.212

🇮🇳 152.59.119.227

🇺🇸 147.185.132.116

🇫🇷 91.231.89.137

🇺🇸 66.132.224.27

🇳🇱 64.89.162.38

🇺🇸 64.62.156.74

🇸🇬 47.84.204.145