JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

178.213.204.213

Activity Trending Down

Abuse Confidence Score

26% Elevated

6 reports

6 reporters · latest 2 weeks ago

ISP: Gerkon LTD
Usage Type: Fixed Line ISP
ASN: AS42498
Domain Name: gerkona.ru
Country: 🇷🇺 Russian Federation
City: Verkhnyaya Pyshma, Sverdlovsk Oblast

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

6 from 6 distinct reporters

First reported

September 26th 2026

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇫🇷 France 3 🇷🇺 Russian Federation 2 🇸🇪 Sweden 1

Most common categories Port Scan 5 SSH 1 Brute-Force 1

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 cybertailor	2026-10-23 21:48:44 UTC · (2 weeks ago)	178.213.204.213 - - [23/Oct/2026:18:20:23 +0500] "HEAD / HTTP/1.0" 404 0 "-" "portscanner/1.0" 178.213.204.213 - - [24/Oct/2026:02:48:24 +0500] "GET /cgi-bin/hi3510/param.cgi HTTP/1.1" 404 146 "-" "RTSP-Scanner/1.0" 178.213.204.213 - - [24/Oct/2026:0 ... show more 178.213.204.213 - - [23/Oct/2026:18:20:23 +0500] "HEAD / HTTP/1.0" 404 0 "-" "portscanner/1.0" 178.213.204.213 - - [24/Oct/2026:02:48:24 +0500] "GET /cgi-bin/hi3510/param.cgi HTTP/1.1" 404 146 "-" "RTSP-Scanner/1.0" 178.213.204.213 - - [24/Oct/2026:02:48:24 +0500] "GET /ISAPI/System/deviceInfo HTTP/1.1" 404 146 "-" "RTSP-Scanner/1.0" 178.213.204.213 - - [24/Oct/2026:02:48:25 +0500] "GET /cgi-bin/hi3510/param.cgi?cmd=getdevtype HTTP/1.1" 404 146 "-" "RTSP-Scanner/1.0" 178.213.204.213 - - [24/Oct/2026:02:48:25 +0500] "GET /cgi-bin/hi3510/param.cgi?cmd=getdeviceinfo HTTP/1.1" 404 146 "-" "RTSP-Scanner/1.0" ... show less	Port Scan
🇫🇷 zulzeen	2026-10-20 13:56:35 UTC · (2 weeks ago)	[incypit-web] Blocked by SysWarden Firewall [GEO] (SSH Attack)	SSH Brute-Force
🇫🇷 geeek	2026-10-20 13:56:14 UTC · (2 weeks ago)	Port scanning: 8080 TCP Blocked	Port Scan
🇫🇷 Kejult	2026-10-20 11:47:56 UTC · (2 weeks ago)	Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 3 target ports and 3 source port(s). Ports: 22/SSH, 135/MSRPC, 445/SMB. Sensors: Dionaea, Cowrie.	Port Scan
🇷🇺 Vicdedmak	2026-09-26 19:21:00 UTC · (1 month ago)		Port Scan
🇷🇺 weke	2026-09-26 00:23:25 UTC · (1 month ago)	Low-interaction honeypot observation; observed_at=2026-09-26T00:23:25.904Z; window_ms=10012; connections=4; traffic=92B-in/181B-out; destinations=37777/tcp:1c,0B-in,0B-out \| 80/tcp:1c,0B-in,0B-out \| 8000/tcp:1c,0B-in,0B-out \| 80/http:1c,92B-in,181B-o ... show more Low-interaction honeypot observation; observed_at=2026-09-26T00:23:25.904Z; window_ms=10012; connections=4; traffic=92B-in/181B-out; destinations=37777/tcp:1c,0B-in,0B-out \| 80/tcp:1c,0B-in,0B-out \| 8000/tcp:1c,0B-in,0B-out \| 80/http:1c,92B-in,181B-out; protocols=tcp,http; categories=14; http=GET / [ua=Scanner554/v57.0] show less	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 162.158.172.50

🇺🇸 66.132.172.202

🇫🇷 85.217.140.34

🇺🇸 57.141.20.71

🇺🇸 24.10.87.196

🇬🇧 188.240.59.35

🇨🇴 181.54.1.0

🇯🇵 110.74.98.239

🇸🇬 101.47.45.198

🇺🇸 91.192.214.144

🇺🇸 87.83.198.222

🇳🇱 81.22.132.64

🇲🇾 47.250.185.131

🇷🇴 46.97.168.43

🇵🇭 27.49.232.182

🇨🇳 222.223.62.8

🇧🇷 205.210.31.248

🇮🇳 152.52.240.162

🇨🇳 42.230.41.83

🇨🇳 42.178.206.143