JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.213.154.214

185.213.154.214 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 50%: ?

50%

ISP	31173 Services AB infrastructure in Gothenburg, SE.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS39351
Domain Name	31173.se
Country	🇸🇪 Sweden
City	Gothenburg, Vastra Gotaland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.213.154.214

Whois 185.213.154.214

IP Abuse Reports for 185.213.154.214:

This IP address has been reported a total of 132 times from 51 distinct sources. 185.213.154.214 was first reported on September 7th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 IVski.com	2026-09-17 01:27:53 (2 days ago)	IVski WAF \| Blocked GET to /auth — likely automated probe or form spam attempt	Hacking Brute-Force Web App Attack
🇪🇸 pipeline.es	2026-09-16 23:51:22 (2 days ago)	Port scanning / recon \| Evidence: date=2026-09-17 time=01:51:07 devname="[redacted]" devid="[redacte ... show more Port scanning / recon \| Evidence: date=2026-09-17 time=01:51:07 devname="[redacted]" devid="[redacted]" eventtime=1789602666496617909 tz=\"+0200\" logid=\"0000000013\" type=\"traffic\" subtype=\"forward\" level=\"notice\" vd="[redacted]" srcip=185.213.154.214 srcport=52432 srcintf="[redacted]" srcintfrole=\"wan\" dstip=[redacted] dstport=443 dstintf="[redacted]" dstintfrole=\"lan\" srccountry=\"Sweden\" dstcountry=\"Spain\" sessio \| ASN: 31173 Services AB \| Country: SE show less	Port Scan Web App Attack
🇺🇸 abuse-opdc	2026-09-16 17:40:40 (3 days ago)	Malicious HTTP requests matching injection/exploit signatures.	Web App Attack Brute-Force
🇪🇸 raiolanetworks.com	2026-09-12 22:38:46 (6 days ago)	Honeypot detection: Cisco ASA exploit attempt. 45 events observed. Reported automatically from a hon ... show more Honeypot detection: Cisco ASA exploit attempt. 45 events observed. Reported automatically from a honeypot sensor. show less	Hacking
🇨🇿 lp	2026-09-10 06:22:07 (1 week ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-10T07:34:21+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-10T07:34:21+02:00 vpn Access-Reject 'james' station: 185.213.154.214 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-09-08 16:49:41 (1 week ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-08T18:06:22+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-08T18:06:22+02:00 vpn Access-Reject 'jamey' station: 185.213.154.214 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2026-09-08 15:49:41 (1 week ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇨🇿 lp	2026-09-07 21:21:30 (1 week ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-07T22:44:08+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-07T22:44:08+02:00 vpn Access-Reject 'acc' station: 185.213.154.214 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇳🇱 BellFix	2026-09-07 15:26:27 (1 week ago)	Fail2ban reported 185.213.154.214 for npm-docker	Web App Attack
🇨🇿 lp	2026-09-07 15:21:17 (1 week ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-07T16:23:09+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-07T16:23:09+02:00 vpn Access-Reject 'fredric' station: 185.213.154.214 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-09-07 06:20:57 (1 week ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-07T08:15:44+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-07T08:15:44+02:00 vpn Access-Reject 'tech' station: 185.213.154.214 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2026-09-07 03:52:59 (1 week ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇨🇿 lp	2026-09-06 19:49:42 (1 week ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-06T20:18:59+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-06T20:18:59+02:00 vpn Access-Reject 'hilton' station: 185.213.154.214 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-09-06 04:49:34 (1 week ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-06T06:07:06+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-06T06:07:06+02:00 vpn Access-Reject 'charles' station: 185.213.154.214 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-09-04 01:49:51 (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-04T02:22:16+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 185.213.154.214 2026-09-04T02:22:16+02:00 vpn Access-Reject 'toshiba' station: 185.213.154.214 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇶🇦 78.101.146.254

🇨🇦 70.54.182.130

🇺🇸 216.201.10.174

🇵🇱 146.59.32.16

🇷🇺 94.233.10.88

🇳🇱 94.154.46.249

🇬🇧 87.236.176.229

🇺🇸 45.33.54.78

🇺🇸 20.169.55.167

🇬🇧 193.176.29.7

🇧🇷 186.215.228.155

🇮🇩 160.19.166.56

🇫🇷 51.68.111.216

🇳🇱 45.148.10.157

🇮🇳 4.240.126.25

🇮🇩 163.7.4.109

🇬🇧 144.126.238.112

🇨🇳 125.69.195.10

🇳🇱 93.123.109.6

🇷🇴 77.81.21.130