195.211.213.194

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
97% Critical
28 reports
22 reporters · latest 7 hours ago
ISP
ISP Express Ltd Nikopol
Usage Type
Fixed Line ISP
ASN
AS31149
Hostname(s)
client-213-194.en.net.ua
Domain Name
en.net.ua
Country
🇺🇦 Ukraine
City
Nikopol, Dnipropetrovsk
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
28 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 6 🇫🇷 France 5 🇺🇸 United States of America 4
Most common categories Port Scan 18 Brute-Force 7 Hacking 7 SSH 6 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇫🇷 zulzeen
[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Telnet IoT Attack)
IoT Targeted Brute-Force
🇨🇦 lakered
Detectors: [pfsense_monitor] | Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇦🇺 foobax
closed the connection from port 48990
SSH Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:33636 dst:23
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking
🇩🇪 nyuuzyou
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-03T11:23:39Z.
Bad Web Bot
🇳🇱 EGP Abuse Dept
Unauthorized connection to SSH port 22
Port Scan Hacking SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇩🇪 DasDuo
Attempt on port 22 (SSH) - potential remote access / brute-force attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
Port Scan Brute-Force SSH
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Events: 1 | rDNS: client-213-194.en.net.ua | F2B/telnet-honeypot-scan@2026-11-02T11:30:33Z
Port Scan Hacking
🇪🇸 jiossal
IP_Trapped_MikroTik_Firewall_HoneyPot
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.132
🇺🇸 195.184.76.133
🇺🇸 162.216.149.124
🇺🇸 87.83.12.233
🇧🇪 35.195.19.202
🇮🇷 2.184.61.196
🇳🇱 213.209.159.238
🇺🇸 157.230.179.7
🇳🇱 109.160.32.160
🇨🇳 101.76.244.135
🇹🇭 27.130.179.16
🇰🇷 222.104.76.94
🇮🇳 167.71.229.198
🇮🇳 103.25.47.94
🇹🇷 102.135.106.224
🇨🇾 81.4.164.154
🇺🇸 68.166.163.72
🇳🇱 45.148.10.61
🇨🇳 42.236.73.142
🇹🇿 41.93.28.23
feedback