JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.91.227.222

45.91.227.222 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 95%: ?

95%

ISP	HDTIDC LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137427
Domain Name	f57.net
Country	🇭🇰 Hong Kong
City	Tung Chung, Islands

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.91.227.222

Whois 45.91.227.222

IP Abuse Reports for 45.91.227.222:

This IP address has been reported a total of 36 times from 28 distinct sources. 45.91.227.222 was first reported on July 21st 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 JCB	2026-08-20 07:33:00 (3 days ago)	45.91.227.222 - - [19/Aug/2026:17:59:50 +0300] "GET /sys_domain.js HTTP/1.1" 404 196 "-" "Mozilla/5. ... show more 45.91.227.222 - - [19/Aug/2026:17:59:50 +0300] "GET /sys_domain.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" show less	Web App Attack
Anonymous	2026-08-19 07:04:04 (4 days ago)	Illegitimate and/or suspicious requests.	Hacking
🇪🇸 liewebs	2026-08-18 13:00:37 (5 days ago)	SYN Flood attack detected - server.liewebs.es	Port Scan DDoS Attack
🇦🇺 dyln	2026-08-18 11:53:12 (5 days ago)	Dyls honeypot brute-force: proto8 (2 total hits)	Brute-Force
Anonymous	2026-08-18 03:47:58 (5 days ago)	Blocked by firewall on hugin [80/tcp] \| Rule: Blocklist \| SPT: 33002 \| TTL: 44 \| LEN: 403 \| TOS: 0x0 ... show more Blocked by firewall on hugin [80/tcp] \| Rule: Blocklist \| SPT: 33002 \| TTL: 44 \| LEN: 403 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-08-17 10:07:01 (6 days ago)	[rede-164-29] 08/17/2026-07:07:01.530706, 45.91.227.222, Protocol: 6, ET DROP Spamhaus DROP Listed T ... show more [rede-164-29] 08/17/2026-07:07:01.530706, 45.91.227.222, Protocol: 6, ET DROP Spamhaus DROP Listed Traffic Inbound group 6 show less	Hacking
🇺🇸 LMAS	2026-08-17 09:56:48 (6 days ago)	Automated scan detected. Probe type: Zero-Day/Wildcard Probe. Requested: /template/059jx015_wtpl/lay ... show more Automated scan detected. Probe type: Zero-Day/Wildcard Probe. Requested: /template/059jx015_wtpl/layui/css/layui.css — Honeypot triggered. show less	Brute-Force Web App Attack
🇩🇪 iRaphi05	2026-08-17 07:52:07 (6 days ago)	Honeypot detection: GET request on /cn/home/web/index.php \| User-Agent: Mozilla/5.0 (iPhone; CPU iPh ... show more Honeypot detection: GET request on /cn/home/web/index.php \| User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1 show less	Hacking Web App Attack
Anonymous	2026-08-17 06:03:02 (6 days ago)	2026-08-17T06:03:02.143117+00:00 gotosocial caddy[74004]: {"level":"info","ts":1786946582.1429446,"l ... show more 2026-08-17T06:03:02.143117+00:00 gotosocial caddy[74004]: {"level":"info","ts":1786946582.1429446,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"45.91.227.222","remote_port":"33332","client_ip":"45.91.227.222","proto":"HTTP/1.1","method":"GET","host":"www.jmkp6.best","uri":"/cn/home/web/index.php","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1"],"Accept":["text/html,application/xhtml+xml,/"],"Accept-Language":["zh-CN,zh;q=0.9"]}},"bytes_read":0,"user_id":"","duration":0.000109409,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://www.jmkp6.best/cn/home/web/index.php"]}} ... show less	Hacking Web App Attack
🇺🇸 aks4226	2026-08-16 06:12:49 (1 week ago)	Attacking common web applications. (n01)	Web App Attack
🇩🇪 sojan	2026-08-15 06:52:06 (1 week ago)	45.91.227.222 - - [09/Aug/2026:07:50:17 +0200] "GET / HTTP/1.1" 502 157 "-" "Mozilla/5.0 (iPhone; CP ... show more 45.91.227.222 - - [09/Aug/2026:07:50:17 +0200] "GET / HTTP/1.1" 502 157 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" 45.91.227.222 - - [09/Aug/2026:14:37:15 +0200] "GET / HTTP/1.1" 502 157 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" 45.91.227.222 - - [15/Aug/2026:08:52:05 +0200] "GET / HTTP/1.1" 502 157 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" ... show less	Web App Attack
🇧🇷 diego	2026-08-15 06:50:33 (1 week ago)	[rede-164-29] 08/15/2026-03:50:32.834103, 45.91.227.222, Protocol: 6, ET DROP Spamhaus DROP Listed T ... show more [rede-164-29] 08/15/2026-03:50:32.834103, 45.91.227.222, Protocol: 6, ET DROP Spamhaus DROP Listed Traffic Inbound group 6 show less	Hacking
🇺🇸 Floofie	2026-08-13 06:45:11 (1 week ago)	45.91.227.222 - - [13/Aug/2026:02:43:41 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU ... show more 45.91.227.222 - - [13/Aug/2026:02:43:41 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" 45.91.227.222 - - [13/Aug/2026:02:45:10 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" 45.91.227.222 - - [13/Aug/2026:02:45:11 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Floofie	2026-08-11 10:54:38 (1 week ago)	45.91.227.222 - - [11/Aug/2026:06:15:12 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU ... show more 45.91.227.222 - - [11/Aug/2026:06:15:12 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" 45.91.227.222 - - [11/Aug/2026:06:15:32 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" 45.91.227.222 - - [11/Aug/2026:06:54:37 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-08-10 06:23:15 (1 week ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/web-asn-lockdown-high.	Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 2806:2f0:9bc1:fdd1:d982:e73:4b7e:6f4e

🇺🇸 205.210.31.68

🇨🇳 175.11.141.148

🇮🇩 163.7.3.26

🇫🇮 147.185.133.218

🇳🇱 89.248.172.9

🇳🇱 89.21.67.172

🇳🇱 85.11.167.225

🇸🇬 35.187.231.181

🇿🇦 102.129.62.159

🇮🇳 74.125.178.156

🇺🇸 66.132.186.230

🇬🇧 3.9.159.216

🇳🇱 193.176.31.227

🇫🇷 169.58.209.154

🇮🇳 144.48.225.222

🇳🇱 91.92.40.200

🇩🇪 31.70.80.107

🇳🇱 195.178.110.137

🇦🇷 190.137.208.90