JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.113.22.113

217.113.22.113 was found in our database!

This IP was reported 144 times. Confidence of Abuse is 100%: ?

100%

ISP	LIR LLC
Usage Type	Fixed Line ISP
ASN	AS210147
Domain Name	lir.am
Country	🇦🇲 Armenia
City	Yerevan, Yerevan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.113.22.113

Whois 217.113.22.113

IP Abuse Reports for 217.113.22.113:

This IP address has been reported a total of 144 times from 83 distinct sources. 217.113.22.113 was first reported on June 5th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-08-23 00:34:21 (2 days ago)	tcp ports: 22,23 (2 or more attempts)	Port Scan
Anonymous	2026-08-23 00:03:14 (2 days ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇧🇷 noconex	2026-08-22 21:52:11 (2 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.113.22 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.113.22.113 show less	Port Scan Brute-Force SSH
🇦🇹 urnilxfgbez	2026-08-21 22:45:00 (3 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-08-21 07:51:14 (4 days ago)	tcp ports: 22,23 (12 or more attempts)	Port Scan
🇦🇹 urnilxfgbez	2026-08-20 22:45:00 (4 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 Zkillu	2026-08-20 19:10:36 (4 days ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS215599. This IP (AS210147) sent ~17791 packets (1.15 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇧🇷 noconex	2026-08-20 16:46:05 (4 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.113.22 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 217.113.22.113 show less	Port Scan Brute-Force SSH
🇫🇷 Zkillu	2026-08-20 16:17:27 (4 days ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 16:12:27 -> 2026-08-20 16:27:27 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 16:12:27 -> 2026-08-20 16:27:27 UTC) targeting AS215599. This IP (AS210147) sent ~183868 packets (260.86 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-20 15:37:02 (4 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 14:20:32 (5 days ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 22:29:29 (5 days ago)	UDP flood (DDoS) vs AS215599: 37284 pkts / 53.32 MB to UDP 80/8443 across 679 dst IP(s), 2026-08-19 ... show more UDP flood (DDoS) vs AS215599: 37284 pkts / 53.32 MB to UDP 80/8443 across 679 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:29:29 (5 days ago)	UDP flood (DDoS) vs AS215599: 37284 pkts / 53.32 MB to UDP 80/8443 across 679 dst IP(s), 2026-08-19 ... show more UDP flood (DDoS) vs AS215599: 37284 pkts / 53.32 MB to UDP 80/8443 across 679 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 lechat	2026-08-19 21:34:35 (5 days ago)	2026-08-19T21:34:34.931095+0000 inbound port scan detected by Suricata. src=217.113.22.113:41520 dst ... show more 2026-08-19T21:34:34.931095+0000 inbound port scan detected by Suricata. src=217.113.22.113:41520 dst=51.68.231.122:22 proto=TCP. signature="ET SCAN Potential SSH Scan" category="Attempted Information Leak" sid=2001219 reason=scan_signature. show less	Port Scan
🇵🇱 sefinek.net	2026-08-18 10:38:04 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from AM. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint ... show more Triggered Cloudflare WAF (firewallCustom) from AM. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /contact-me \| UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.3201.1648 Mobile Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.209.150

🇺🇸 172.236.103.8

🇹🇼 125.231.164.116

🇺🇸 100.27.121.171

🇸🇬 97.74.87.152

🇺🇸 91.230.168.177

🇳🇱 91.92.40.29

🇬🇧 62.60.130.253

🇰🇷 61.111.250.85

🇦🇿 37.32.77.142

🇸🇬 152.32.218.149

🇺🇸 137.184.27.190

🇨🇳 123.245.84.253

🇨🇳 106.12.151.23

🇹🇳 102.107.192.60

🇨🇳 49.7.233.99

🇮🇳 47.247.73.99

🇺🇸 45.79.145.34

🇺🇸 34.67.90.238

🇰🇷 14.49.178.33