160.2.214.11

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
90% Critical
127 reports
73 reporters · latest 2 weeks ago
ISP
CABLE ONE, INC.
Usage Type
Fixed Line ISP
ASN
AS11492
Domain Name
cableone.biz
Country
🇺🇸 United States of America
City
Ardmore, Oklahoma
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
127 from 73 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 27 🇧🇷 Brazil 11 🇩🇪 Germany 11
Most common categories Port Scan 53 Brute-Force 35 SSH 32 Hacking 25 Web App Attack 7
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 IVski.com
IVski WAF | Sensitive file probe detected - looking for .env
Hacking Brute-Force Web App Attack
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 160.2.214.11 [TCP]
Port Scan
🇩🇪 D3vNu11
Level: (LOW): Reputation Unknown via Cowrie IOC Country: United States 1x -> Target Country: Frankreich SSH
Brute-Force SSH
🇩🇪 CDiehl
Oct 29 15:21:25 centrum sshd-session[31321]: Connection closed by 160.2.214.11 port 57382 [preauth] Oct 29 15:38:52 centrum sshd-session[31985]: Connection closed by 160.2.214.11 port 40112 [preauth] ...
Brute-Force SSH
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 2 application-level events across 2 target ports and 2 source port(s). Ports: 22/SSH, 23/Telnet. Sensors: Cowrie.
Port Scan
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
Hacking
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸 uwu-sec
Observed connection on ssh/22.
Port Scan SSH
🇺🇸 anon333
Hacker syslog review 1793172805
Hacking
🇺🇸 anon333
Hacker syslog review 1792935207
Hacking
🇺🇸 RAP
2026-10-25 11:56:06 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 HamSammich
Automated sensor: 3 SSH, telnet connection/probe attempts over the last 24h (latest 2026-10-25T11:04Z).
Port Scan SSH IoT Targeted
🇹🇷 savasboluk
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (5 events in 5min) at 2026-10-25 03:23
Hacking
🇺🇸 RAP
2026-10-24 19:03:07 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 192.241.148.218
🇮🇳 103.25.47.94
🇳🇱 86.38.187.11
🇷🇴 2.57.121.112
🇺🇸 147.182.169.171
🇧🇩 103.120.167.174
🇸🇮 102.220.161.248
🇧🇪 35.205.53.89
🇺🇸 34.66.181.81
🇬🇧 31.14.254.78
🇨🇦 24.79.199.36
🇬🇧 2.57.17.230
🇰🇷 221.162.135.179
🇺🇸 206.81.11.171
🇩🇴 190.0.95.210
🇧🇴 177.222.111.16
🇺🇸 162.216.150.178
🇸🇬 145.223.144.194
🇮🇩 103.94.164.111
🇭🇷 93.143.98.78
feedback