72.50.1.221

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
84% Critical
95 reports
47 reporters · latest 13 hours ago
ISP
Puerto Rico Telephone Company
Usage Type
Fixed Line ISP
ASN
AS10396
Hostname(s)
adsl-72-50-1-221.prtc.net
Domain Name
prtc.net
Country
🇵🇷 Puerto Rico
City
San Juan, San Juan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
95 from 47 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 25 🇫🇷 France 8 🇩🇪 Germany 6
Most common categories Port Scan 28 Bad Web Bot 11 SSH 5 Brute-Force 4 Hacking 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 RAP
2026-11-13 04:27:45 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 micropedro
4 incidents: malicious activity. First: 2026-11-03 19:39, Last: 2026-11-12 19:47 UTC. Triggers: unknown.
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇩🇪 guldkage
Unauthorized connection attempt detected from IP address 72.50.1.221 to port 23 (ger-01) [TELNET]
Exploited Host
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇺🇸 RAP
2026-11-08 14:54:54 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 RAP
2026-11-07 07:49:19 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇺🇸 RAP
2026-11-07 03:46:03 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇺🇸 SX Communications
HTTP application-layer DoS / botnet traffic from 72.50.1.221: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack Bad Web Bot Exploited Host
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:53004 dst:23
Port Scan
🇧🇷 NOCVIU
Honeypot/Firewall detectou varredura não solicitada ou brute-force Inbound nas portas: 23, 22. Total de conexões droppadas: 4.
Port Scan Brute-Force
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸 RAP
2026-11-01 02:11:50 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 72.50.1.221 [TCP]
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.106
🇨🇱 192.140.56.158
🇺🇸 172.110.223.81
🇳🇱 45.148.10.152
🇺🇸 40.124.80.46
🇷🇺 31.173.66.222
🇿🇦 20.164.213.82
🇿🇦 20.87.218.237
🇹🇼 198.235.24.96
🇹🇼 198.235.24.88
🇦🇷 181.23.146.232
🇺🇸 73.217.136.73
🇺🇸 71.6.134.229
🇩🇪 69.5.169.139
🇹🇼 61.218.153.56
🇨🇳 61.147.209.165
feedback