174.4.236.229

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
37 reports
27 reporters · latest 2 days ago
ISP
Shaw Communications
Usage Type
Fixed Line ISP
ASN
AS6327
Hostname(s)
s0106400fc1363dbc.ok.shawcable.net
Domain Name
rogers.com
Country
🇨🇦 Canada
City
Kelowna, British Columbia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
37 from 27 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 11 🇩🇪 Germany 6 🇦🇹 Austria 5
Most common categories Port Scan 27 Brute-Force 13 SSH 12 Hacking 7 IoT Targeted 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Nov 09 11:29:27 sshd-session[44892]: Connection closed by 174.4.236.229 port 60464
Brute-Force SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 39 | Len: 60B | Win: 65535(1) | rDNS: S0106400fc1363dbc.ok.shawcable.net | F2B/ufw-honeypot@2026-11-07T23:32:21Z
Port Scan Hacking
🇺🇸 benjensen
SSH honeypot — automated credential stuffing and scanning detected by Cowrie honeypot
Brute-Force SSH
🇩🇪 ValtonTahiri
Port Scan
🇫🇮 anycast_ac
Blocked by UFW on legacypanel [23/tcp] | SPT: 37594 | TTL: 42 | LEN: 60 | TOS: 0x00 • Reported by: FemboyHolding LTD
Port Scan IoT Targeted
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇺🇸 thefuzz4
SSH tarpit (endlessh): 2 unsolicited connection(s) to port 22, held 16 minute(s). Automated report.
Brute-Force SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇳🇱 ras07
Brute force SSH login attempts.
Brute-Force SSH
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇫🇮 jonahtebaa
SSH tarpit (endlessh) capture on jonahtebaa infra
Port Scan Brute-Force SSH
🇨🇿 0x44
174.4.236.229 [ 05/Nov/2026 Connection attempt blocked ]
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸 MPL
tcp ports: 22,23 (12 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 208.72.153.219
🇺🇸 157.22.74.160
🇩🇪 138.68.97.171
🇺🇸 20.112.236.17
🇺🇸 20.102.91.13
🇺🇸 193.19.109.223
🇫🇷 169.58.109.98
🇺🇸 43.166.176.98
🇰🇷 27.102.116.43
🇺🇦 162.120.188.51
🇩🇪 134.209.229.23
🇷🇺 92.101.255.135
🇺🇦 91.225.162.96
🇬🇧 89.37.172.144
🇫🇷 84.247.169.171
🇸🇪 83.255.209.245
🇩🇪 81.169.151.143
🇺🇸 66.132.172.202
🇫🇷 45.154.138.180
🇳🇱 213.209.159.226
feedback