94.228.6.229

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
32 reports
31 reporters · latest 2 minutes ago
ISP
Embou Nuevas Tecnologias SL
Usage Type
Fixed Line ISP
ASN
AS42666
Hostname(s)
229.net-3-6.embou.es
Domain Name
embou.com
Country
🇪🇸 Spain
City
Cosuenda, Aragon
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
32 from 31 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 11 🇫🇷 France 5 🇺🇸 United States of America 4
Most common categories SSH 25 Brute-Force 25 Port Scan 5 Hacking 4 IoT Targeted 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 fcsz
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
Brute-Force SSH
🇸🇬 demonsword
SSH brute-force detected: 5 failed login attempts in the last 1 hour.
Brute-Force SSH
🇺🇸 ShadowWhisperer
SSH credential attempt. (credential denied)
Brute-Force SSH
🇺🇸 qtland
Brute-Force SSH
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇫🇮 BlackSl1de
Banned by Fail2Ban on SSH
Brute-Force
🇩🇪 Rasmus
Brute-Force SSH
🇳🇱 hostero
Brute-Force SSH
🇩🇪 www.mammazone.it
Hacking
🇹🇷 ozyurterdem
T-Pot Suricata IDS: 3 alert(s) in 24h. SiberKale Threat Intel (unknown-bad filtered).
Hacking IoT Targeted
🇩🇪 FDC
Malicious activity from 94.228.6.229 detected by FDC honeypots. Categories: 14,18,22. 13 events in last 24h.
Port Scan Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 14 hits on ports [2222, 22222] (automated)
Port Scan
🇹🇷 Threat.live
Threat.live: Brute Force
Brute-Force
🇫🇷 ImMarvolo
Unauthorized connection attempt detected eu-gra-01, SSH Brute-Force
Brute-Force SSH
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 217.100.184.50
🇸🇬 212.73.148.37
🇪🇬 196.221.164.156
🇩🇪 194.187.176.134
🇨🇳 183.242.200.142
🇺🇸 146.88.241.40
🇩🇪 87.106.218.222
🇫🇮 80.66.83.43
🇺🇸 70.167.235.26
🇵🇰 154.192.131.196
🇫🇷 91.196.152.173
🇯🇵 72.63.212.157
🇫🇷 51.159.52.113
🇿🇦 41.13.14.145
🇸🇬 8.222.181.172
🇳🇱 200.138.46.69
🇩🇪 195.182.16.23
🇹🇷 185.131.211.204
🇹🇭 184.82.27.218
🇸🇬 165.154.200.214
feedback