91.204.224.22
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- HDTIDC LIMITED
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS205960
- Domain Name
- f57.net
- Country
- 🇰🇷 Korea (the Republic of)
- City
- Seoul, Seoul
Abuse Reports
Total reports
47 from
36 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Selckie |
fail2ban: NGINX unusual impact
|
Web App Attack | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 1720
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 sefinek.net |
Blocked by UFW on NY01 [1755/tcp] | SPT: 48583 | TTL: 46 | LEN: 52 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Unauthorized access (25/tcp/smtp)
|
Port Scan Spoofing | |
| 🇺🇸 mutebot.net |
SRC=91.204.224.22, PROTO=TCP, SPT=58376, DPT=139
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 401 hits on ports [7, 9, 13, 21, 22, 23, 25, 26, 37, 53] (automated)
|
Email Spam Port Scan Hacking Brute-Force Web App Attack SSH | |
| 🇫🇷 Danguole Rasalaite Memorial 🇱🇹 |
|
Port Scan Brute-Force SSH | |
| 🇫🇷 WebServ |
Fail2Ban jail [portscan-block]: banned after 5 failed attempt(s). Unauthorized port scan
|
Port Scan | |
| 🇫🇷 noi |
honeypot proto=TCP dpt=1433 flags=SYN hits=1 window=1h
|
Port Scan | |
| 🇫🇷 vtchost.com |
scanning closed ports
...
|
Port Scan | |
| 🇺🇸 ISPLtd |
Nov 5 12:52:00 91.204.224.22 TCP SPT=34355 DPT=10010 SYN
Nov 5 12:52:00 91.204.224.22 TCP SPT=40056 DPT=2000 SYN
Nov 5 12:52:00 91.204.224.22 TCP SPT=33671 DPT=162 SYN
...
|
Port Scan | |
| 🇩🇪 anycast_ac |
Blocked by UFW on baremetal1 [5101/tcp] | SPT: 58832 | TTL: 51 | LEN: 52 | TOS: 0x00 • Reported by: FemboyHolding LTD
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-05 11:25:51 UTC Unauthorized activity to TCP port 139. SMB
|
Port Scan | |
| 🇺🇸 jbettigole |
MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/FTP/Winbox/API/WWW) triggering escalating 5m/15m/1h/1d blacklist
|
Brute-Force Hacking | |
| 🇺🇸 computertrendz |
Blocked by os-abuseipdb; 30 hits, proto=tcp, ports=10050,1026,106,1080,1110,11211,135,138,1433,179,2000,2121,30
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown