JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.238.57.34

194.238.57.34 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 55%: ?

55%

ISP	NODE-HOST
Usage Type	Data Center/Web Hosting/Transit
ASN	AS198550
Domain Name	nodehost.ru
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.238.57.34

Whois 194.238.57.34

IP Abuse Reports for 194.238.57.34:

This IP address has been reported a total of 15 times from 11 distinct sources. 194.238.57.34 was first reported on June 1st 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-10 23:34:47 (5 days ago)	Drop from IP address 194.238.57.34 to tcp-port 5978	Port Scan
🇫🇮 6kilowatti	2026-06-09 23:54:05 (6 days ago)	2026-06-10T02:54:04.507496+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-10T02:54:04.507496+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=194.238.57.34 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x20 TTL=242 ID=61192 PROTO=TCP SPT=61234 DPT=5923 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 phil2k	2026-06-06 11:29:13 (1 week ago)	TCP portscan or auth bruteforce on ports: 5932 5953 5956 5978 ssh telnet : Firewall: Within 2026-06- ... show more TCP portscan or auth bruteforce on ports: 5932 5953 5956 5978 ssh telnet : Firewall: Within 2026-06-01 15:24:33 - 2026-06-01 19:19:15 CEST(+0200) identified: port scan from 194.238.57.34/32 on uncommon port/s: 5932(tcp:5932),5956(tcp:5956),5953(tcp:5953),5978(tcp:5978) (4 trials) Fail2ban: Within 2026-06-01 15:24:33 - 2026-06-01 19:19:16 CEST(+0200) banned: 9 times by fail2ban[firewall]; 9 times by fail2ban[recidive] show less	Port Scan Brute-Force SSH
🇳🇱 ByeByte API	2026-06-06 04:29:39 (1 week ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 5937, 5984. Activity wind ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 5937, 5984. Activity window: 2026-06-06 04:22 UTC to 2026-06-06 04:29 UTC. show less	Port Scan
🇳🇱 ByeByte API	2026-06-06 04:22:36 (1 week ago)	byebyte.space auth: TCP packet to port 5984 (high-risk service) at 2026-06-06T04:22:35Z. Source port ... show more byebyte.space auth: TCP packet to port 5984 (high-risk service) at 2026-06-06T04:22:35Z. Source port 61234. TCP flags: SYN. Packet: 44B, TTL 241, window 1025, IP id 53818. Single packet, dropped at firewall. p0f: OS Linux 2.2.x-3.x (barebone) (generic match), 14 hops, link IPSec or GRE. show less	Port Scan
🇫🇷 EDSL	2026-06-06 04:13:43 (1 week ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇫🇮 6kilowatti	2026-06-05 17:35:55 (1 week ago)	2026-06-05T20:35:55.273892+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-06-05T20:35:55.273892+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=194.238.57.34 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=11605 PROTO=TCP SPT=61234 DPT=5907 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 ✨	2026-06-05 01:13:14 (1 week ago)	Rule : Security Rule: Security Event: Security 0 - %592 194.238.57.34 61234 *hidden-privacy* ... show more Rule : Security Rule: Security Event: Security 0 - %592 194.238.57.34 61234 *hidden-privacy* 5964 6 243552 %597 13 show less	Port Scan Hacking Brute-Force
🇩🇪 ValtonTahiri	2026-06-04 15:04:02 (1 week ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=194.238.57.34; proto=TCP; source_port=61234; target_port=5913; flags=SYN show less	Port Scan
Anonymous	2026-06-03 04:09:07 (1 week ago)	Drop from IP address 194.238.57.34 to tcp-port 5972	Port Scan
🇺🇸 OceanTreasure	2026-06-01 22:10:06 (2 weeks ago)	tcp/5900; Scan for open VNC remote desktop port (R18) @ 2026-06-01T22:07:24Z	Brute-Force
🇩🇪 phil2k	2026-06-01 17:19:19 (2 weeks ago)	fail2ban:recidive:2026-06-01 15:31:31,380 fail2ban.actions [3541078]: NOTICE [firewall] Ban ... show more fail2ban:recidive:2026-06-01 15:31:31,380 fail2ban.actions [3541078]: NOTICE [firewall] Ban 194.238.57.34 2026-06-01 19:19:16,136 fail2ban.actions [3541078]: NOTICE [firewall] Ban 194.238.57.34 show less	DDoS Attack Port Scan Brute-Force
🇫🇷 dusfor72	2026-06-01 14:00:26 (2 weeks ago)	aggressive portscan ...	Port Scan
🇩🇪 phil2k	2026-06-01 13:31:33 (2 weeks ago)	fail2ban:firewall:2026-06-01T15:24:33.717383+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-06-01T15:24:33.717383+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=194.238.57.34 DST=<PRIVATE_IPv4> LEN=44 TOS=0x00 PREC=0x20 TTL=242 ID=12215 PROTO=TCP SPT=61234 DPT=5932 WINDOW=1025 RES=0x00 SYN URGP=0 2026-06-01T15:31:30.854158+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=194.238.57.34 DST=<PRIVATE_IPv4> LEN=44 TOS=0x00 PREC=0x20 TTL=242 ID=12462 PROTO=TCP SPT=61234 DPT=5956 WINDOW=1025 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇹🇷 Threat.live	2026-06-01 03:55:03 (2 weeks ago)	Suspicious Connection Attempts	Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 60.189.186.7

🇨🇳 183.159.16.106

🇬🇧 144.126.193.202

🇮🇳 103.165.62.188

🇯🇵 103.125.146.77

🇳🇱 45.148.10.157

🇸🇬 43.102.32.101

🇧🇪 34.62.36.252

🇻🇪 200.11.151.195

🇻🇳 183.91.11.36

🇮🇳 182.156.19.46

🇭🇰 103.243.26.174

🇳🇱 91.92.40.6

🇧🇬 62.133.47.13

🇧🇷 45.238.242.0

🇸🇬 43.102.198.101

🇨🇳 14.103.123.166

🇳🇱 5.175.192.17

🇨🇳 222.186.242.145

🇰🇷 222.112.192.170