JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

194.195.222.107

Recent Activity

Abuse Confidence Score

41% Elevated

12 reports

8 reporters · latest 3 hours ago

ISP: Linode, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS63949
Hostname(s): 194-195-222-107.ip.linodeusercontent.com
Domain Name: linode.com
Country: 🇺🇸 United States of America
City: Richardson, Texas

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

12 from 8 distinct reporters

First reported

November 6th 2026

Most recent report

3 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 8 🇫🇷 France 1 🇭🇰 Hong Kong 1

Most common categories Port Scan 7 Hacking 7 Brute-Force 5 SSH 5

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 WinterGateIC	2026-11-12 16:20:45 UTC · (3 hours ago)	[BRUTE-FORCE] SSH probe — authentication method discovery \| ATT&CK TA0043 (Reconnaissance) \| Category: SSH Enumeration \| ATT&CK:T1046 \| via redis:// \| at edge perimeter \| src_port=6379 ASN=AS63949 sev=high conf=60% as=AKAMAI-LINODE-AP isp=Akamai Tech ... show more [BRUTE-FORCE] SSH probe — authentication method discovery \| ATT&CK TA0043 (Reconnaissance) \| Category: SSH Enumeration \| ATT&CK:T1046 \| via redis:// \| at edge perimeter \| src_port=6379 ASN=AS63949 sev=high conf=60% as=AKAMAI-LINODE-AP isp=Akamai Technologies, Inc. geo=US/Richardson rdns=194-195-222-107.ip.linodeusercontent.com infra=hosting usage=Data_Center/Web_Hosting/Transit sensor=honeypot active=11-12 16:20..16:20Z \| raw=Cmd: *1 $4 PING \| 16 correlated nodes campaign=camp_002a cohort=19ips NOVEL_PAYLOAD fp=4979934c6c0e \| 2026-11-12 16:20:45 UTC report#11 [zero-day candidate, with prior observed variants] [BOTNET: 16] show less	SSH Brute-Force Hacking
🇩🇪 WinterGateIC	2026-11-11 00:00:21 UTC · (1 day ago)	[BRUTE-FORCE] SSH probe — authentication method discovery \| ATT&CK TA0043 (Reconnaissance) \| Category: SSH Enumeration \| ATT&CK:T1046 \| via redis:// \| at edge perimeter \| src_port=6379 ASN=AS63949 attempts=5 sev=high conf=60% as=AKAMAI-LINODE-AP isp= ... show more [BRUTE-FORCE] SSH probe — authentication method discovery \| ATT&CK TA0043 (Reconnaissance) \| Category: SSH Enumeration \| ATT&CK:T1046 \| via redis:// \| at edge perimeter \| src_port=6379 ASN=AS63949 attempts=5 sev=high conf=60% as=AKAMAI-LINODE-AP isp=Akamai Technologies, Inc. geo=US/Richardson rdns=194-195-222-107.ip.linodeusercontent.com infra=hosting usage=Data_Center/Web_Hosting/Transit sensor=honeypot active=11-10 23:03..11-11 00:00Z \| raw=Cmd: *1 $4 PING \| 17 correlated nodes campaign=camp_0021 cohort=19ips NOVEL_PAYLOAD fp=4979934c6c0e \| 2026-11-11 00:00:21 UTC [zero-day candidate, with prior observed variants] [BOTNET: 17] show less	SSH Brute-Force Hacking
🇩🇪 WinterGateIC	2026-11-10 01:50:38 UTC · (2 days ago)	[BRUTE-FORCE] SSH probe — authentication method discovery \| ATT&CK TA0043 (Reconnaissance) \| Category: SSH Enumeration \| ATT&CK:T1046 \| via redis:// \| at edge perimeter \| src_port=6379 ASN=AS63949 sev=high conf=60% as=AKAMAI-LINODE-AP isp=Akamai Tech ... show more [BRUTE-FORCE] SSH probe — authentication method discovery \| ATT&CK TA0043 (Reconnaissance) \| Category: SSH Enumeration \| ATT&CK:T1046 \| via redis:// \| at edge perimeter \| src_port=6379 ASN=AS63949 sev=high conf=60% as=AKAMAI-LINODE-AP isp=Akamai Technologies, Inc. geo=US/Richardson rdns=194-195-222-107.ip.linodeusercontent.com infra=hosting usage=Data_Center/Web_Hosting/Transit sensor=honeypot active=11-10 01:50..01:50Z \| raw=Cmd: *1 $4 PING \| 18 correlated nodes campaign=camp_001e cohort=21ips NOVEL_PAYLOAD fp=4979934c6c0e \| 2026-11-10 01:50:38 UTC report#68 [zero-day candidate, with prior observed variants] [BOTNET: 18] show less	SSH Brute-Force Hacking
🇩🇪 EinfxchFinn	2026-11-09 02:55:45 UTC · (3 days ago)	Unauthorized connection attempt to port 6381 from 194.195.222.107	Port Scan
🇩🇪 WinterGateIC	2026-11-09 01:25:43 UTC · (3 days ago)	[BRUTE-FORCE] SSH probe — authentication method discovery \| ATT&CK TA0043 (Reconnaissance) \| Category: SSH Enumeration \| ATT&CK:T1046 \| via redis:// \| at edge perimeter \| src_port=6379 ASN=AS63949 sev=high conf=60% as=AKAMAI-LINODE-AP isp=Akamai Tech ... show more [BRUTE-FORCE] SSH probe — authentication method discovery \| ATT&CK TA0043 (Reconnaissance) \| Category: SSH Enumeration \| ATT&CK:T1046 \| via redis:// \| at edge perimeter \| src_port=6379 ASN=AS63949 sev=high conf=60% as=AKAMAI-LINODE-AP isp=Akamai Technologies, Inc. geo=US/Richardson rdns=194-195-222-107.ip.linodeusercontent.com infra=hosting usage=Data_Center/Web_Hosting/Transit sensor=honeypot active=11-09 01:25..01:25Z \| raw=Cmd: *1 $4 PING \| 18 correlated nodes campaign=camp_001c cohort=21ips NOVEL_PAYLOAD fp=4979934c6c0e \| 2026-11-09 01:25:43 UTC report#69 [zero-day candidate, with prior observed variants] [BOTNET: 18] show less	SSH Brute-Force Hacking
🇩🇪 Coinetic AI Security	2026-11-08 08:15:38 UTC · (4 days ago)	Connection to a trap port: 1 attempts on port 6379, 2026-11-08 08:15 - 08:15 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).	Port Scan Hacking
🇺🇸 LotPhantom	2026-11-08 07:22:24 UTC · (4 days ago)	2026-11-08T07:22:23.007013+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=194.195.222.107 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=38210 DF PROTO=TCP SPT=42864 DPT=6379 WINDOW=64240 ... show more 2026-11-08T07:22:23.007013+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=194.195.222.107 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=38210 DF PROTO=TCP SPT=42864 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 2026-11-08T07:22:24.031230+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=194.195.222.107 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=38211 DF PROTO=TCP SPT=42864 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇩🇪 WinterGateIC	2026-11-08 04:00:46 UTC · (4 days ago)	[BRUTE-FORCE] SSH probe — authentication method discovery \| ATT&CK TA0043 (Reconnaissance) \| Category: SSH Enumeration \| ATT&CK:T1046 \| via redis:// \| at edge perimeter \| src_port=6379 ASN=AS63949 sev=high conf=60% as=AKAMAI-LINODE-AP isp=Akamai Tech ... show more [BRUTE-FORCE] SSH probe — authentication method discovery \| ATT&CK TA0043 (Reconnaissance) \| Category: SSH Enumeration \| ATT&CK:T1046 \| via redis:// \| at edge perimeter \| src_port=6379 ASN=AS63949 sev=high conf=60% as=AKAMAI-LINODE-AP isp=Akamai Technologies, Inc. geo=US/Richardson rdns=194-195-222-107.ip.linodeusercontent.com infra=hosting usage=Data_Center/Web_Hosting/Transit sensor=honeypot active=11-08 04:00..04:00Z \| raw=Cmd: *1 $4 PING \| 31 correlated nodes campaign=camp_0017 cohort=31ips NOVEL_PAYLOAD fp=4979934c6c0e \| 2026-11-08 04:00:46 UTC report#17 [zero-day candidate, with prior observed variants] [BOTNET: 31] show less	SSH Brute-Force Hacking
🇹🇷 alastyr	2026-11-08 02:36:45 UTC · (4 days ago)	Port scan: probes to 3 unused addresses of AS3188 within 60 s. 419 further packets from this source blocked during the following ban. Ports: 6381,6379,6380,16379. Detected by Alastyr network sensor (XDP).	Port Scan
Anonymous	2026-11-07 21:11:18 UTC · (4 days ago)	6379/tcp (1 or more attempts)	Port Scan
🇫🇷 noi	2026-11-07 06:20:36 UTC · (5 days ago)	honeypot proto=TCP dpt=6379 flags=SYN hits=1 window=1h	Port Scan
🇩🇪 iNetWorker	2026-11-06 11:18:32 UTC · (6 days ago)	trying to access non-authorized port	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇱 2a0d:6fc0:155a:ac00:a8d2:df79:7c46:b880

🇺🇸 216.25.90.55

🇺🇸 198.23.213.7

🇺🇦 151.0.44.128

🇸🇬 138.2.77.6

🇮🇳 106.211.52.115

🇨🇳 106.12.38.73

🇹🇷 78.135.111.47

🇵🇱 46.149.217.195

🇺🇸 20.81.41.46

🇨🇳 14.103.118.167

🇧🇷 2804:14d:bad7:3048:f064:f1fc:231f:c970

🇨🇳 221.229.218.50

🇧🇩 203.153.62.206

🇦🇹 194.166.176.81

🇸🇬 188.166.181.118

🇦🇿 188.65.162.139

🇯🇴 176.29.113.95

🇳🇱 138.226.239.234

🇨🇳 120.48.181.68