176.213.228.97

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
28 reports
22 reporters · latest 16 hours ago
ISP
JSC ER-Telecom Holding Ufa branch
Usage Type
Fixed Line ISP
ASN
AS51035
Domain Name
ertelecom.ru
Country
🇷🇺 Russian Federation
City
Ufa, Bashkortostan Republic
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
28 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 6 🇫🇷 France 5 🇩🇪 Germany 4
Most common categories Port Scan 21 Hacking 7 SSH 6 Brute-Force 5 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 cunning-fox
SSH brute-force login attempts observed.
Brute-Force SSH
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸 mutebot.net
SRC=176.213.228.97, PROTO=TCP, SPT=53938, DPT=23
Port Scan
🇹🇷 trakyabirlik
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (5 events in 5min) at 2026-11-14 12:24
Web App Attack
🇺🇸 HamSammich
Automated sensor: 3 SSH, telnet connection/probe attempts over the last 24h (latest 2026-11-13T19:34Z).
Port Scan SSH IoT Targeted
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target ports and 3 source port(s). Ports: 22/SSH, 23/Telnet. Sensors: Cowrie.
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇧🇾 StatsMe
Date: 2026-11-12T22:18:08.000+00:00 | Action: deny | Port: 23 | Log: Connection Failed
Brute-Force SSH Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
Port Scan
🇺🇸 Axel
Atom Honypot: 1 connection to telnet (tcp/23) observed by 1 honeypot sensor between 2026-11-12 14:44 UTC and 2026-11-12 14:44 UTC.
Port Scan
🇫🇮 6kilowatti
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇭🇰 CyberFox
22/tcp (1 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇹 151.19.14.124
🇸🇬 104.28.161.30
🇸🇬 104.28.160.174
🇨🇳 103.236.62.184
🇦🇺 20.211.107.116
🇺🇸 13.57.49.8
🇬🇧 5.252.83.145
🇺🇸 3.12.129.7
🇷🇴 81.181.129.218
🇩🇪 34.32.25.234
🇺🇸 155.2.212.7
🇺🇸 91.132.124.12
🇰🇷 61.76.112.4
🇨🇳 43.138.35.127
🇺🇸 34.234.75.114
🇺🇸 34.21.117.134
feedback