JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.238.57.147

194.238.57.147 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 73%: ?

73%

ISP	NODE-HOST
Usage Type	Data Center/Web Hosting/Transit
ASN	AS198550
Domain Name	node-host.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.238.57.147

Whois 194.238.57.147

IP Abuse Reports for 194.238.57.147:

This IP address has been reported a total of 66 times from 48 distinct sources. 194.238.57.147 was first reported on January 31st 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 thororen	2026-07-14 20:56:42 (2 days ago)	Blocked by UFW [5933/tcp] Source port: 61000 TTL: 236 Packet length: 44 TOS: 0x00 This report was g ... show more Blocked by UFW [5933/tcp] Source port: 61000 TTL: 236 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 XYCoderXY	2026-07-14 18:11:02 (2 days ago)	SSH/web brute-force & exploit scanning against lumerux.com (automated report).	Brute-Force SSH
🇩🇪 london2038.com	2026-07-14 17:42:16 (2 days ago)	Connection atttempts against closed TCP ports Jul 14 19:36:14 BLOCK SRC=194.238.57.147 LEN=44 TOS=0x ... show more Connection atttempts against closed TCP ports Jul 14 19:36:14 BLOCK SRC=194.238.57.147 LEN=44 TOS=0x00 PREC=0x20 TTL=245 ID=5047 PROTO=TCP SPT=61000 DPT=5988 WINDOW=1025 RES=0x00 SYN Jul 14 19:39:35 BLOCK SRC=194.238.57.147 LEN=44 TOS=0x00 PREC=0x20 TTL=245 ID=55060 PROTO=TCP SPT=61000 DPT=5935 WINDOW=1025 RES=0x00 SYN Jul 14 19:42:15 BLOCK SRC=194.238.57.147 LEN=44 TOS=0x00 PREC=0x20 TTL=245 ID=48013 PROTO=TCP SPT=61000 DPT=5965 WINDOW=1025 RES=0x00 SYN show less	Port Scan
🇩🇪 bescared	2026-07-14 17:38:18 (2 days ago)	F2B - Malicious activity detected. Excessive port scans. -c23856ef-	Port Scan
🇵🇱 mkey	2026-07-14 12:05:01 (3 days ago)	Source IP from blacklist is still actively scanning our network. (13 hits in last hour, last seen 20 ... show more Source IP from blacklist is still actively scanning our network. (13 hits in last hour, last seen 2026-07-14 13:58:17) show less	Port Scan
Anonymous	2026-07-14 05:00:07 (3 days ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇫🇷 manah	2026-07-13 23:00:39 (3 days ago)	Port scan and/or repeated connection to closed ports (daily report)	Port Scan
🇵🇱 genokrad	2026-07-13 17:21:55 (3 days ago)	Unauthorized connection attempt on TCP/5900 (VNC)	Port Scan
Anonymous	2026-07-13 15:37:52 (3 days ago)	Tried our host z.	Port Scan Hacking Exploited Host
🇺🇸 chillcog.com	2026-07-13 13:53:29 (3 days ago)	Blocked by on honeypot2 [5959/tcp] \| SPT: 61000 \| TTL: 239 \| LEN: 44 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [5959/tcp] \| SPT: 61000 \| TTL: 239 \| LEN: 44 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇹🇷 Threat.live	2026-07-13 01:40:05 (4 days ago)	Suspicious Connection Attempts	Brute-Force
🇯🇵 Dominicwu	2026-07-12 07:19:11 (5 days ago)	2026-07-12T07:15:34.160552jp5-20260623163121e9b43b kernel: [172261.051550] F2B-PORTSCAN IN=eth0 OUT= ... show more 2026-07-12T07:15:34.160552jp5-20260623163121e9b43b kernel: [172261.051550] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:90:74:e5:3c:c7:86:2a:69:57:08:00 SRC=194.238.57.147 DST=156.231.117.253 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=31120 PROTO=TCP SPT=61000 DPT=5937 WINDOW=1025 RES=0x00 SYN URGP=0 2026-07-12T07:16:04.032000jp5-20260623163121e9b43b kernel: [172290.922880] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:90:74:e5:3c:c7:86:2a:69:57:08:00 SRC=194.238.57.147 DST=156.231.117.253 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=40459 PROTO=TCP SPT=61000 DPT=5934 WINDOW=1025 RES=0x00 SYN URGP=0 2026-07-12T07:16:53.998703jp5-20260623163121e9b43b kernel: [172340.889258] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:90:74:e5:3c:c7:86:2a:69:57:08:00 SRC=194.238.57.147 DST=156.231.117.253 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=47919 PROTO=TCP SPT=61000 DPT=5904 WINDOW=1025 RES=0x00 SYN URGP=0 2026-07-12T07:17:16.939274jp5-20260623163121e9b43b kernel: [172363.829820] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:90:74:e5:3c:c ... show less	Port Scan
🇧🇷 chronos	2026-07-11 11:40:57 (6 days ago)	Generic malicious activity: ALERT: External attempt to access critical TCP port... \| Port: 5900 \| Pr ... show more Generic malicious activity: ALERT: External attempt to access critical TCP port... \| Port: 5900 \| Proto: TCP \| Location: United Kingdom, N/A show less	Port Scan Hacking
🇬🇧 Joe-Mark	2026-02-01 12:00:30 (5 months ago)	Found duggytuxy Blocklist / proto=6 . srcport=57837 . dstport=2095 . packet filter (32 ... show more Found duggytuxy Blocklist / proto=6 . srcport=57837 . dstport=2095 . packet filter (321) show less	Port Scan
🇷🇺 Agrohim	2026-02-01 05:50:05 (5 months ago)	Gate Tf blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force SSH

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 103.241.43.193

🇬🇧 2a01:b740:984:100::2:7

🇫🇷 194.5.53.79

🇬🇧 188.240.59.6

🇧🇷 187.74.211.14

🇧🇪 34.14.96.232

🇬🇧 213.166.84.41

🇺🇸 195.184.76.219

🇧🇷 170.244.29.246

🇫🇮 147.185.133.217

🇨🇳 119.249.100.117

🇮🇳 116.68.72.250

🇳🇱 86.54.31.34

🇴🇲 85.154.19.138

🇭🇰 47.82.64.40

🇬🇧 2a06:4880:8000::9b

🇫🇷 194.5.53.105

🇳🇱 176.65.149.27

🇩🇪 169.58.25.13

🇺🇸 162.216.150.55