192.238.196.211
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- ANTBOX NETWORKS LIMITED
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS138995
- Domain Name
- antboxnetworks.com
- Country
- 🇭🇰 Hong Kong
- City
- Hong Kong
Abuse Reports
Total reports
15 from
13 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇷 kuru.bbs067 |
Phishing email received
|
Phishing | |
| 🇩🇪 eposs-it.de |
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=587
|
Port Scan Hacking | |
| 🇩🇪 maikeer932 |
Probing many admin API endpoints without authorization. Auto-reported after our server banned it.
|
Hacking Web App Attack | |
| 🇳🇱 EGP Abuse Dept |
Unsolicited connection to port 465
|
Port Scan Hacking | |
| 🇩🇪 EGP Abuse Dept |
Scanning for port/service exploits on tpc-009.mach3builders.nl
|
Port Scan Hacking | |
| 🇿🇦 maximonline.co.za |
Brute Force SMTP AUTH Attack
|
Brute-Force | |
| 🇬🇧 Silly Development |
Malicious activity detected from 138995 Antbox Networks Limited towards host sillydev.co.uk (GET HTTP/2) @ 2026-10-22T18:52:43Z (11 occurrences)
|
DDoS Attack Exploited Host | |
| 🇦🇺 FireGuard Server |
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=587
|
Port Scan Hacking | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on panel.averisca.cloud (ua-quarantined)
|
Bad Web Bot | |
| 🇳🇱 GES |
Credential scanning on player_api.php (5 distinct logins in 120s). Auto-blocked by XUI Shield.
|
DDoS Attack Port Scan | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 adnscom.com |
IPS trigger: dovecot scanning/attack
|
Brute-Force Hacking | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on politempire.org (ua-quarantined)
|
Bad Web Bot | |
| 🇮🇹 VHosting |
Detected mail brute force attack from different servers
|
Brute-Force | |
| 🇦🇹 AustrianSimon |
09 Oct 2026 03:57:12UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 192.238.196.211
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown