194.39.228.193

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
55% Elevated
41 reports
27 reporters · latest 10 hours ago
ISP
Elaf Al Rafidain for Communications, Internet, Network Services and Computer Trading and Office Equipment Limited
Usage Type
Fixed Line ISP
ASN
AS57000
Domain Name
elafalrafideen.net
Country
🇮🇶 Iraq
City
As Samawah, Muthanna
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
41 from 27 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 7 🇩🇪 Germany 6 🇨🇿 Czechia 3
Most common categories Brute-Force 9 Bad Web Bot 8 Web App Attack 5 Port Scan 5 SSH 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 LRob
DDoS Attack Bad Web Bot
Anonymous
denied SSH access attempt. destination port 22.
Port Scan Brute-Force SSH
🇩🇪 nyuuzyou
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-06T01:50:51Z.
Bad Web Bot
🇩🇪 nyuuzyou
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T10:56:46Z.
Bad Web Bot
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 194.39.228.193 2026-11-05T08:14:19+0100 vpn Access-Reject station: 194.39.228.193
Brute-Force Web App Attack
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 194.39.228.193 2026-11-01T07:00:39+0100 vpn Access-Reject station: 194.39.228.193
Brute-Force Web App Attack
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 194.39.228.193 2026-10-30T13:43:17+0100 vpn Access-Reject station: 194.39.228.193
Brute-Force Web App Attack
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: RDP Connection (3389/tcp)
Port Scan Brute-Force
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:25266 dst:23
Port Scan
🇫🇷 masterguru
(modsec_5040) ModSec 5040: API Basic Auth blocked from 194.39.228.193 (IQ/Iraq/-): 1 in the last 3600 secs (0-196)
Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 22) Source port: 14162 TTL: 39 Packet length: 60 TOS: 0x08 This report (for 194.39.228.193) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SSH Brute-Force
🇺🇸 HamSammich
Automated sensor: 1 SSH connection/probe attempts over the last 24h (latest 2026-10-04T06:10Z).
Brute-Force SSH
Anonymous
denied SSH access attempt. destination port 22.
Port Scan Brute-Force SSH
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 185.111.172.188
🇲🇾 183.171.49.158
🇺🇸 173.255.212.137
🇳🇱 109.160.32.115
🇩🇰 185.129.62.64
🇨🇭 172.161.40.129
🇮🇩 114.30.86.98
🇺🇸 64.225.54.158
🇺🇸 136.90.84.240
🇨🇳 106.75.25.139
🇮🇷 5.160.128.67
🇹🇷 5.133.103.94
feedback