185.213.154.164
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- 31173 Services AB infrastructure in Gothenburg, SE.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS39351
- Domain Name
- 31173.se
- Country
- 🇸🇪 Sweden
- City
- Gothenburg, Vastra Gotaland
Abuse Reports
Total reports
211 from
66 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 senkodev |
2026-11-07T15:34:33.938153+02:00 vm1386.de.snk.wtf sshd[390312]: Connection closed by 185.213.154.164 port 56084
2026-11-07T15:37:48.813548+02:00 vm1386.de.snk.wtf sshd[390340]: Connection closed by 185.213.154.164 port 46086 [preauth]
...
|
Brute-Force SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 57329)
Source port: 40019
TTL: 51
Packet length: 60
TOS: 0x00
This report (for 185.213.154.164) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 52051)
Source port: 48213
TTL: 51
Packet length: 60
TOS: 0x00
This report (for 185.213.154.164) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇸🇪 SkyDancer |
Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface.
|
Hacking Brute-Force SSH | |
| 🇷🇴 DamonOne |
Blocked by OPNsense; 9 hits, proto=tcp, ports=63707
|
Port Scan Hacking | |
| 🇷🇴 DamonOne |
Blocked by OPNsense; 3 hits, proto=udp, ports=40415,63707
|
Port Scan Hacking | |
| Anonymous |
Blocked: Reason='Possible SQL injection activity (96/60 min)'; Requests=96
|
SQL Injection | |
| 🇫🇷 matthieul.dev |
Blocked by os-abuseipdb; 16 hits, proto=tcp, ports=57511
|
Port Scan Brute-Force | |
| 🇩🇪 pltcldvlpr |
|
Bad Web Bot | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇨🇭 backslash |
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
|
Bad Web Bot | |
| 🇫🇷 matthieul.dev |
Blocked by os-abuseipdb; 9 hits, proto=tcp, ports=51413
|
Port Scan Brute-Force | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇬🇧 Oakley |
(confirmed_bot_sig) Confirmed bot
|
Hacking | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
|
Exploited Host Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown