212.235.219.141

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
81% Critical
63 reports
17 reporters · latest 2 hours ago
ISP
Vrtec Ciciban Novo mesto - enota Labod Novo mesto
Usage Type
University/College/School
ASN
AS2107
Domain Name
arnes.si
Country
🇸🇮 Slovenia
City
Ljubljana, Ljubljana
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
63 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 25 🇫🇷 France 15 🇰🇷 Korea (the Republic of) 8
Most common categories Brute-Force 41 SSH 33 Port Scan 28 Hacking 17 Exploited Host 7
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇭🇰 sandra361
Port scan detected: 14 packets across 2 ports (2, 22). | Evidence: REAPER_TARPIT: IN=eth0 SRC=212.235.219.141 LEN=52 TOS=0x14 PREC=0x00 TTL=46 ID=53659 DF PROTO=TCP SPT=49617 DPT=22 WINDOW=14600 RES=0x00 ACK PSH URGP=0
Port Scan
🇰🇷 yazzang
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
Hacking Brute-Force Exploited Host SSH
🇬🇧 sandra361
Port scan detected: 16 packets across 2 ports (2, 22). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=212.235.219.141 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=19799 DF PROTO=TCP SPT=36924 DPT=22 WINDOW=14600 RES=0x00 ACK PSH URGP=0
Port Scan
🇰🇷 2048
SSH authentication attempts on edge03 (port 22) Username / password (result, count): "root" / "_EmhAyi$=3SV-#=" (failed, 1)
SSH
🇰🇷 yazzang
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
Hacking Brute-Force Exploited Host SSH
🇺🇸 psh-ack
Brute-Force SSH
🇺🇸 ryzenx3d
Automated report from an SSH honeypot: successful password authentication
Brute-Force
🇺🇸 Aurealize
firewall port scanning detected. 2 or more observation(s) from 2026-11-07T06:38:45.000Z through 2026-11-07T06:38:45.000Z.
Port Scan
🇺🇸 sandra361
Port scan detected: 6 packets across 1 port (2). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=212.235.219.141 LEN=40 TOS=0x00 PREC=0x00 TTL=41 ID=54830 DF PROTO=TCP SPT=51920 DPT=2 WINDOW=14600 RES=0x00 ACK FIN URGP=0
Port Scan
🇫🇷 uthul
T-Pot honeypot: 3 hits on ports [2] (automated)
Port Scan
🇰🇷 yazzang
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
Hacking Brute-Force Exploited Host SSH
🇺🇸 sandra361
Port scan detected: 15 attempts across 2 ports (2, 22). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=212.235.219.141 LEN=52 TOS=0x00 PREC=0x00 TTL=41 ID=44441 DF PROTO=TCP SPT=59230 DPT=22 WINDOW=14600 RES=0x00 ACK PSH URGP=0
Port Scan
🇺🇸 psh-ack
Brute-Force SSH
🇱🇺 SiteXL
Hacking Port Scan Brute-Force SSH
🇺🇸 ryzenx3d
Automated report from an SSH honeypot: successful password authentication
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 209.141.46.157
🇺🇸 207.90.244.19
🇬🇧 193.176.29.13
🇩🇪 151.243.11.45
🇺🇸 54.84.147.79
🇺🇸 207.90.244.18
🇺🇦 188.163.73.112
🇺🇸 162.216.149.113
🇩🇪 151.243.11.136
🇺🇸 147.203.255.20
🇸🇬 141.11.43.239
🇨🇳 117.24.219.133
🇺🇸 85.239.244.94
🇳🇱 77.239.124.145
🇩🇪 69.5.169.93
🇹🇭 49.0.87.123
🇦🇷 38.210.129.238
🇨🇳 222.210.35.197
🇺🇸 207.90.244.12
🇬🇧 206.189.25.255
feedback