95.216.166.13

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
290 reports
117 reporters · latest 4 days ago
ISP
Hetzner Online GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS24940
Hostname(s)
static.13.166.216.95.clients.your-server.de
Domain Name
hetzner.com
Country
🇫🇮 Finland
City
Helsinki, Uusimaa
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
290 from 117 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 128 🇩🇪 Germany 42 🇫🇷 France 28
Most common categories Port Scan 244 SSH 71 Brute-Force 47 Hacking 37 Web App Attack 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇭 SOC [GOLINE SA]
SSH Brute-Force
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇺🇸 technojoe99
Attempted SSH connection from 95.216.166.13 port 35908 asn outside arin; no valid users in that asn
Port Scan SSH
🇨🇭 SOC [GOLINE SA]
SSH Brute-Force
🇺🇸 RAP
2026-11-05 11:29:08 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇧🇾 StatsMe
Date: 2026-11-05T11:25:14.000+00:00 | Action: deny | Port: 22 | Log: Connection Failed
Brute-Force SSH Port Scan
🇺🇸 MPL
tcp ports: 22,2222 (5 or more attempts)
Port Scan
🇫🇷 zulzeen
[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SSH Attack)
SSH Brute-Force
🇧🇾 sashan
2026-11-05T13:14:01.401074+03:00 gate kernel: nftables: JAIL-SSH IN=wan OUT= MAC= SRC=95.216.166.13 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=45060 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ...
Port Scan
🇺🇸 lippard2748
1 blocked TCP SYN to port 2222. 2026-11-05T09:35:06+00:00.
Port Scan
🇫🇷 Entalpi.net
Tried to hit sensible closed port commonly used in attacks
Port Scan Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 22) Source port: 54932 TTL: 237 Packet length: 40 TOS: 0x00 This report (for 95.216.166.13) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SSH Brute-Force
🇫🇷 EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (SSH Attack)
Brute-Force Port Scan SSH
🇺🇸 anon333
Hacker syslog review 1793867646
Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 22) Source port: 57730 TTL: 238 Packet length: 40 TOS: 0x00 This report (for 95.216.166.13) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SSH Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 205.210.31.238
🇳🇱 45.148.10.151
🇺🇸 20.25.145.66
🇺🇸 216.25.89.132
🇳🇱 213.177.179.79
🇬🇧 193.163.125.5
🇺🇸 162.216.149.182
🇨🇳 60.18.139.82
🇺🇸 192.253.209.138
🇲🇽 189.143.77.13
🇷🇺 188.255.123.124
🇺🇸 162.216.150.63
🇳🇱 91.92.47.191
🇳🇱 64.205.72.199
🇷🇴 2.57.122.150
🇧🇪 198.235.24.200
🇩🇪 23.132.164.184
🇷🇴 2.57.121.25
🇪🇸 217.160.39.106
🇲🇲 204.157.173.192
feedback