37.221.147.138

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
30% Elevated
68 reports
44 reporters · latest 1 week ago
ISP
Radio Service Ltd.
Usage Type
Fixed Line ISP
ASN
AS62384
Domain Name
radioservice.net.ua
Country
🇺🇦 Ukraine
City
Lviv, Lviv
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
68 from 44 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇦🇹 Austria 1 🇩🇪 Germany 1 🇫🇷 France 1
Most common categories Brute-Force 6 Port Scan 1 Web App Attack 1 Hacking 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇹 AustrianSimon
02 Nov 2026 22:27:52UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 37.221.147.138
Brute-Force
🇫🇷 Stara
Multiple failed email logins - brute force attack
Brute-Force
🇹🇷 Jova
Repeated failed IMAP logins to a mail account (credential guessing).
Brute-Force
🇸🇮 basing
2026-10-14 08:46:28 bs SASL PLAIN auth failed: rhost=37.221.147.138...
Brute-Force
🇳🇱 Mangelot Hosting
Web App Attack
🇸🇰 Schomburg
Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: BBRIUNE9IJJaYzH31fpxZUV5Sgv38P4E
Port Scan Hacking Brute-Force
🇩🇪 FeG Deutschland
Mail: - login with unknown user - bruteforce
Brute-Force
🇸🇰 Schomburg
Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: HfRlD7uLuwaC6uTRwn18ZtECrlZhrnFU
Port Scan Hacking Brute-Force
🇩🇪 FeG Deutschland
Mail: - login with unknown user - bruteforce
Brute-Force
🇫🇮 danskefilm.dk
IMAP password guessing
Brute-Force
🇺🇸 TAY
Brute-Force
🇮🇩 sockominfo
Hacking Web App Attack
🇮🇩 sockominfo
Zimbra: Login failures from malicious IP: 37.221.147.138. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT
Hacking Web App Attack
🇺🇸 interbiznw.com
dovecot-bruteforce
Port Scan Hacking Spoofing Brute-Force Exploited Host
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇸 212.119.50.213
🇩🇪 165.154.164.57
🇨🇳 140.246.194.211
🇺🇿 94.158.62.16
🇺🇸 91.230.168.175
🇺🇸 91.230.168.9
🇮🇩 38.248.19.246
🇬🇧 35.203.211.45
🇺🇸 195.184.76.245
🇷🇴 193.46.255.86
🇹🇷 185.231.227.230
🇩🇪 176.9.83.57
🇳🇱 109.160.32.129
🇵🇱 81.162.214.188
🇧🇪 35.206.141.203
🇬🇧 35.203.210.217
🇺🇸 4.148.240.176
🇳🇱 176.65.148.20
🇩🇪 167.94.146.44
🇦🇺 103.108.229.254
feedback