195.20.6.224

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
46% Elevated
51 reports
35 reporters ยท latest 1 month ago
ISP
FOP Kovalchuk Igor Vasilevich
Usage Type
Fixed Line ISP
ASN
AS51380
Domain Name
ua.fm
Country
๐Ÿ‡บ๐Ÿ‡ฆ Ukraine
City
Pohreby, Kyiv Oblast
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
51 from 35 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 10 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 7 ๐Ÿ‡จ๐Ÿ‡ญ Switzerland 2
Most common categories Port Scan 25 SSH 10 Hacking 10 Brute-Force 9 IoT Targeted 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡จ๐Ÿ‡ญ cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port 23 - sch
Port Scan Hacking
๐Ÿ‡ท๐Ÿ‡บ dnsbd.tech
nftables: Port scan (TCP:23) [srv2]
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp ports: 23,22 (6 or more attempts)
Port Scan
๐Ÿ‡ฐ๐Ÿ‡ท winter
Connection attemp from 195.20.6.224 to port 22
Brute-Force SSH
๐Ÿ‡น๐Ÿ‡ท SeczarSecureOps
Auto-blocked by Seczar SecureOps โ€” High-Risk Port Probe (admin-managed entries) โ€” SSH (5 events in 5min) at 2026-10-03 11:00
Hacking
๐Ÿ‡ฉ๐Ÿ‡ช SiyCah
195.20.6.224 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 340B. Report generated by Endlessh Report Generator v1.2.3
Brute-Force Port Scan SSH Hacking
๐Ÿ‡ฎ๐Ÿ‡น CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking
๐Ÿ‡ฉ๐Ÿ‡ช SiyCah
195.20.6.224 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 340B. Report generated by Endlessh Report Generator v1.2.3
Brute-Force Port Scan SSH Hacking
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp ports: 23,22 (8 or more attempts)
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช SiyCah
195.20.6.224 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 340B. Report generated by Endlessh Report Generator v1.2.3
Brute-Force Port Scan SSH Hacking
๐Ÿ‡จ๐Ÿ‡ฆ Blinker73
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ HamSammich
Automated sensor: 3 SSH, telnet connection/probe attempts over the last 24h (latest 2026-09-29T23:34Z).
Brute-Force SSH IoT Targeted
๐Ÿ‡จ๐Ÿ‡ญ m_vlasov
SSH/Telnet honeypot: 0 login attempts, 3 sessions, 0 shell commands.
Port Scan IoT Targeted
๐Ÿ‡ง๐Ÿ‡ช sid3windr
SSH port scan (Tarpitted for 20s, wasted 5B)
Port Scan SSH
๐Ÿ‡ฌ๐Ÿ‡ง Andrew
2026-09-28T05:23:35.206618+00:00 Debian sshd-session[3269896]: kex_exchange_identification: Connection closed by remote host 2026-09-28T05:23:35.206651+00:00 Debian sshd-session[3269896]: Connection closed by 195.20.6.224 port 65090 ...
Port Scan Hacking Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 192.207.105.196
๐Ÿ‡ณ๐Ÿ‡ฑ 172.94.9.55
๐Ÿ‡ฉ๐Ÿ‡ช 142.93.110.64
๐Ÿ‡ง๐Ÿ‡ฉ 103.159.2.113
๐Ÿ‡ช๐Ÿ‡ธ 79.116.138.220
๐Ÿ‡ท๐Ÿ‡บ 78.37.41.161
๐Ÿ‡ช๐Ÿ‡ธ 66.81.172.222
๐Ÿ‡จ๐Ÿ‡ณ 58.33.97.119
๐Ÿ‡บ๐Ÿ‡ธ 35.147.104.135
๐Ÿ‡บ๐Ÿ‡ธ 191.101.241.242
๐Ÿ‡ช๐Ÿ‡ธ 188.26.214.36
๐Ÿ‡ท๐Ÿ‡บ 178.216.165.187
๐Ÿ‡ช๐Ÿ‡ธ 95.23.169.29
๐Ÿ‡บ๐Ÿ‡ธ 72.83.59.198
๐Ÿ‡บ๐Ÿ‡ธ 68.10.53.95
๐Ÿ‡บ๐Ÿ‡ธ 43.166.248.131
๐Ÿ‡ช๐Ÿ‡ธ 37.132.104.166
๐Ÿ‡บ๐Ÿ‡ธ 34.207.233.218
๐Ÿ‡ช๐Ÿ‡ธ 213.4.39.246
๐Ÿ‡บ๐Ÿ‡ธ 159.223.97.218
feedback