This IP address has been reported a total of
47
times from
28 distinct
sources.
185.213.154.188 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[rede-44-49] 10/16/2026-23:19:10.659566, 185.213.154.188, Protocol: 6, LOCAL SCAN horizontal SYN pro ...
show more[rede-44-49] 10/16/2026-23:19:10.659566, 185.213.154.188, Protocol: 6, LOCAL SCAN horizontal SYN probe
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-open-proxy. 1 matching log event at 2026-10-16T23:18:58Z (UTC). Sample requests: CONNECT example.com:443 -> 400
show less
Keenetic Firewall: Unauthorized connection attempt to ports [1081/tcp,1337/tcp,3128/tcp,4145/tcp,567 ...
show moreKeenetic Firewall: Unauthorized connection attempt to ports [1081/tcp,1337/tcp,3128/tcp,4145/tcp,5678/tcp,8000/tcp,8080/tcp,80/tcp,8447/tcp,8888/tcp,9050/tcp,1080/tcp,443/tcp,8118/tcp,8443/tcp]. Blocked via Kernel/NFLOG Trap. (43 hits in 24h).
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-open-proxy. 1 matching log event at 2026-10-15T22:22:34Z (UTC). Sample requests: CONNECT example.com:443 -> 400
show less
[rede-44-49] 10/15/2026-14:44:50.853380, 185.213.154.188, Protocol: 6, LOCAL SCAN horizontal SYN pro ...
show more[rede-44-49] 10/15/2026-14:44:50.853380, 185.213.154.188, Protocol: 6, LOCAL SCAN horizontal SYN probe
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=185.213.154.188; proto=TCP; source_port=26386; target_port=8080
show less
[rede-44-49] 10/15/2026-13:09:20.645284, 185.213.154.188, Protocol: 6, LOCAL MikroTik recon multi-po ...
show more[rede-44-49] 10/15/2026-13:09:20.645284, 185.213.154.188, Protocol: 6, LOCAL MikroTik recon multi-porta
show less
Port Scan
Showing 1 to
15
of 47 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩