178.159.211.248

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
86% Critical
22 reports
17 reporters · latest 16 hours ago
ISP
NPK Home-Net Ltd.
Usage Type
Fixed Line ISP
ASN
AS24812
Hostname(s)
pool211.homenet.ua
Domain Name
homenet.ua
Country
🇺🇦 Ukraine
City
Kyiv, Kyiv City
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 7 🇩🇪 Germany 3 🇫🇷 France 3
Most common categories Port Scan 17 Hacking 6 Brute-Force 3 Exploited Host 2 IoT Targeted 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
Hacking
🇵🇱 bart@
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
Port Scan
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -151302cd-
Port Scan
Anonymous
Unauthorized access (23/tcp/telnet) Targeted IoT device:Unknown (Probability:High)
Port Scan IoT Targeted
🇭🇰 mutebot.net
SRC=178.159.211.248, PROTO=TCP, SPT=28642, DPT=23
Port Scan
🇺🇸 RAP
2026-11-08 07:44:04 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇺🇸 sumnone
Port probing on unauthorized port 23
Port Scan Hacking Exploited Host
🇳🇱 venix
Unauthorized connection attempt detected from IP address 178.159.211.248 to port 23 (web01.amsterdam)
Brute-Force Exploited Host
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:41518 dst:23
Port Scan
🇧🇪 LucasCHX
Cowrie honeypot (SSH/Telnet). 1 session(s), 1 login attempts. Main behaviour: Robot Mirai (enrôlement dans un botnet). Commands: /bin/busybox | cd /proc && cat self/cmdline
Brute-Force SSH
🇺🇸 RAP
2026-11-06 18:02:07 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇪🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 53 | Len: 60B | Win: 65535(1) | rDNS: pool211.homenet.ua | F2B/ufw-honeypot@2026-11-06T09:19:06Z
Port Scan Hacking
🇺🇸 RAP
2026-11-01 17:03:20 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 201.124.247.112
🇪🇸 194.99.104.249
🇧🇷 187.51.84.86
🇲🇴 182.93.50.90
🇸🇮 102.220.161.171
🇸🇬 47.79.200.182
🇨🇳 218.202.40.196
🇺🇸 209.33.45.122
🇬🇧 194.50.235.146
🇨🇭 179.43.144.226
🇺🇸 172.203.228.230
🇺🇸 165.154.254.169
🇫🇷 163.172.66.206
🇺🇸 156.232.13.246
🇨🇳 106.89.48.166
🇫🇷 91.196.152.223
feedback