JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.44.78.211

194.44.78.211 was found in our database!

This IP was reported 221 times. Confidence of Abuse is 77%: ?

77%

ISP	LLC EKSINTECH
Usage Type	Fixed Line ISP
ASN	AS3255
Domain Name	eksintech.net
Country	🇺🇦 Ukraine
City	Lviv, Lviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.44.78.211

Whois 194.44.78.211

IP Abuse Reports for 194.44.78.211:

This IP address has been reported a total of 221 times from 79 distinct sources. 194.44.78.211 was first reported on June 11th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 wlt-blocker	2026-08-25 22:43:22 (4 hours ago)	Attempts to login to mail server with wrong username and/or password	Brute-Force
🇩🇪 ksol-hostmaster	2026-08-25 00:03:44 (1 day ago)	Aug 25 02:03:43 ksol dovecot[75015]: auth-worker(39704): conn unix:auth-worker (uid=143): auth-worke ... show more Aug 25 02:03:43 ksol dovecot[75015]: auth-worker(39704): conn unix:auth-worker (uid=143): auth-worker<5>: sql(anonymized@email,194.44.78.211,<wAf+1dNZ57XCLE7T>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇩🇪 filstal.org	2026-08-24 21:49:26 (1 day ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇬🇧 openstrike.co.uk	2026-08-23 22:51:24 (2 days ago)	Email auth failures (3)	Brute-Force
🇷🇴 clauss	2026-08-23 01:30:22 (3 days ago)	IP reached maximum auth failures for a one day block	Brute-Force
Anonymous	2026-08-19 02:05:08 (1 week ago)	Authentication failure	Brute-Force
🇮🇩 sockominfo	2026-08-17 05:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 194.44.78.211. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 194.44.78.211. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-17 04:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 194.44.78.211. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 194.44.78.211. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-17 03:00:09 (1 week ago)	Zimbra: Login failures from malicious IP: 194.44.78.211. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 194.44.78.211. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇹🇭 thaizone.com	2026-08-14 18:27:31 (1 week ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
🇸🇰 Schomburg	2026-08-13 21:20:02 (1 week ago)	Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Report ... show more Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: Pgo1gY29Apwhw7CfUbiYlpgW8I6KLeG0 show less	Port Scan Hacking Brute-Force
🇸🇰 Schomburg	2026-08-09 20:26:44 (2 weeks ago)	Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Report ... show more Automatic report from SCH firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: J7H1SF5Zui5hmEIhx0jTyj5ZsmnWx2o2 show less	Port Scan Hacking Brute-Force
🇺🇸 kosada.com	2026-08-07 10:25:59 (2 weeks ago)	IMAP password guessing	Brute-Force
🇩🇪 FeG Deutschland	2026-08-06 10:08:06 (2 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇮🇩 sockominfo	2026-08-06 07:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 194.44.78.211. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 194.44.78.211. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack

Showing 1 to 15 of 221 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:4f8:150:13a5::100:2d

🇳🇱 185.226.197.9

🇳🇱 185.226.197.7

🇸🇬 185.200.116.70

🇹🇭 182.53.223.245

🇫🇮 172.217.37.154

🇺🇸 162.216.150.170

🇺🇸 147.185.132.248

🇺🇸 91.230.168.115

🇩🇪 69.5.169.124

🇺🇸 66.132.186.160

🇺🇸 65.49.20.68

🇬🇧 51.75.161.33

🇨🇳 42.100.62.15

🇧🇪 35.241.214.41

🇨🇱 201.241.40.136

🇺🇸 185.180.141.45

🇲🇳 180.149.126.6

🇮🇳 172.253.230.152

🇺🇸 162.248.3.24