195.211.213.204
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- ISP Express Ltd Nikopol
- Usage Type
- Fixed Line ISP
- ASN
- AS31149
- Hostname(s)
- client-213-204.en.net.ua
- Domain Name
- en.net.ua
- Country
- 🇺🇦 Ukraine
- City
- Nikopol, Dnipropetrovsk
Abuse Reports
Total reports
20 from
20 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇺🇸 m2jest1c |
2026-10-27T03:11:11.107951 rhel-20gb-ash-1 sshd[3611417]: error: kex_exchange_identification: Connection closed by remote host
2026-10-27T03:11:11.107990 rhel-20gb-ash-1 sshd[3611417]: Connection closed by 195.211.213.204 port 60330
...
|
Brute-Force SSH | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to SSH port 22
|
Port Scan Hacking SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇮🇳 Parth Maniar |
This IP address carried out 2 port scanning attempts on 23-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
|
Port Scan SSH | |
| 🇳🇱 soverin |
Network scan on port 22
|
Email Spam | |
| Anonymous |
IP & Port Scan.
|
SSH Port Scan Brute-Force | |
| 🇩🇪 bescared |
F2B - Malicious activity detected. Unauthorized connection attempt: SSH. -151302cd-
|
Port Scan SSH | |
| 🇩🇪 zerodaysystemde |
Port (22 tcp) Scanner - SSH - HoneyPot
|
Port Scan SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:50850 dst:23
|
Port Scan | |
| 🇺🇸 cunning-fox |
SSH brute-force login attempts observed.
|
Brute-Force SSH | |
| 🇺🇸 HamSammich |
Automated sensor: 2 SSH connection/probe attempts over the last 24h (latest 2026-10-19T03:35Z).
|
Brute-Force SSH | |
| Anonymous |
SSH tarpit (endlessh) connection from 195.211.213.204
|
Brute-Force SSH | |
| 🇩🇪 LRob |
WordPress login brute force | path: /wp-login.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
|
Brute-Force Web App Attack | |
| 🇺🇸 RAP |
2026-10-18 10:04:38 UTC Unauthorized activity to TCP port 22. SSH
|
SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown