195.211.213.28
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- ISP Express Ltd Nikopol
- Usage Type
- Fixed Line ISP
- ASN
- AS31149
- Domain Name
- en.net.ua
- Country
- 🇺🇦 Ukraine
- City
- Nikopol, Dnipropetrovsk
Abuse Reports
Total reports
21 from
20 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 vtchost.com |
portscan on honeypot system
...
|
Port Scan | |
| 🇫🇷 noi |
honeypot proto=TCP dpt=445 flags=SYN hits=1 window=1h
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 3 hits on ports [445] (automated)
|
Port Scan Hacking | |
| 🇩🇪 jann |
Honeypot: connection to unused port 445 at 2026-11-11 14:19:12 UTC. No service runs there, any connection is unsolicited scanning.
|
Port Scan | |
| 🇺🇸 knock |
Knock-Knock honeypot brute-force: SMB (1000 total hits)
|
Brute-Force | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port 445
|
Hacking Brute-Force | |
| 🇨🇦 smick |
Brute-force attack.
|
Brute-Force | |
| 🇺🇸 drewf.ink |
[15:45] Completed SMB2 NEGOTIATE (Type: SMB1, Dialect(s): NT LM 0.12, SMB 2.002, SMB 2.???) with no follow-up login attempt - dialect/capability recon
|
Hacking | |
| Anonymous |
1790084643 - 09/22/2026 15:44:03 Host: 195.211.213.28/195.211.213.28 Port: 445 TCP Blocked
...
|
Port Scan | |
| 🇱🇹 NotACaptcha |
Unauthorised access (Sep 12 18:02) SRC=195.211.213.28 LEN=52 TTL=115 ID=9540 DF TCP DPT=445 WINDOW=8192 SYN
|
Port Scan | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: malware/exploit attempt; port scan / service probe. 3 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor.
|
Port Scan Hacking | |
| 🇩🇪 Luhte |
Unsolicited TCP connection from 195.211.213.28 to port 0 at 2026-08-31T14:50:42Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇩🇪 IP Analyzer |
Unauthorized connection attempt from IP address 195.211.213.28 on Port 445(SMB)
|
Port Scan | |
| 🇭🇰 mutebot.net |
SRC=195.211.213.28, PROTO=TCP, SPT=52342, DPT=445
|
Port Scan | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: SMB (25000 total hits)
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown