212.111.201.253

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
138 reports
77 reporters ยท latest 5 hours ago
ISP
Infonet-Telecom
Usage Type
University/College/School
ASN
AS12687
Domain Name
uran.ua
Country
๐Ÿ‡บ๐Ÿ‡ฆ Ukraine
City
Krasyliv, Khmelnytskyi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
138 from 77 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 16 ๐Ÿ‡ซ๐Ÿ‡ท France 11 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 6
Most common categories Port Scan 30 SSH 12 Brute-Force 9 Hacking 9 Bad Web Bot 7
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฎ๐Ÿ‡น CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-11-03 16:31:47 UTC Unauthorized activity to TCP port 22. SSH
SSH
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp ports: 23,22 (8 or more attempts)
Port Scan
๐Ÿ‡ญ๐Ÿ‡ฐ PingMeMaybe
Blocked by UFW on hk [23/tcp] Source port: 24443 TTL: 45 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan IoT Targeted
๐Ÿ‡ณ๐Ÿ‡ฑ Tsumugi Kotobuki
Telnet Brute-Force | Events: 1 | Ports: 23/Telnet | Auth: password(1x) | F2B/telnet-honeypot-bruteforce@2026-11-02T19:52:27Z
Brute-Force
๐Ÿ‡ท๐Ÿ‡ธ Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Port Scan Attack proto:TCP src:17138 dst:23
Port Scan
๐Ÿ‡ฐ๐Ÿ‡ท winter
Connection attemp from 212.111.201.253 to port 22
Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-31 12:06:08 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-31 03:05:18 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท wiredalter
Blocked by fail2ban on o2VPS [22/tcp] Source Port: 44554 TTL: 44 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com
Brute-Force SSH
Anonymous
2026-10-31 01:28:28 warning[2831830]: host unknown[212.111.201.253]: unauthorized ssh access attempted: tcp/22
Port Scan Brute-Force
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช D3vNu11
Level: (LOW): Reputation Unknown via Cowrie IOC Country: Ukraine 1x -> Target Country: Frankreich SSH
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 195.184.76.234
๐Ÿ‡ง๐Ÿ‡ท 189.90.37.242
๐Ÿ‡บ๐Ÿ‡ธ 147.185.132.225
๐Ÿ‡จ๐Ÿ‡ณ 123.207.5.91
๐Ÿ‡บ๐Ÿ‡ธ 66.33.23.180
๐Ÿ‡บ๐Ÿ‡ธ 66.33.23.99
๐Ÿ‡ณ๐Ÿ‡ฑ 200.138.46.44
๐Ÿ‡ณ๐Ÿ‡ฑ 185.45.193.187
๐Ÿ‡จ๐Ÿ‡ณ 183.230.9.103
๐Ÿ‡ง๐Ÿ‡ด 181.188.163.150
๐Ÿ‡บ๐Ÿ‡ธ 174.138.46.86
๐Ÿ‡จ๐Ÿ‡ฆ 165.245.225.246
๐Ÿ‡บ๐Ÿ‡ธ 144.229.28.132
๐Ÿ‡ต๐Ÿ‡ฐ 119.155.47.138
๐Ÿ‡ฉ๐Ÿ‡ช 104.164.26.112
๐Ÿ‡บ๐Ÿ‡ธ 103.143.10.140
๐Ÿ‡ฒ๐Ÿ‡ถ 92.49.127.211
๐Ÿ‡บ๐Ÿ‡ธ 68.231.112.165
๐Ÿ‡บ๐Ÿ‡ธ 66.33.23.179
๐Ÿ‡จ๐Ÿ‡ณ 39.175.51.58
feedback