JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.195.22.182

159.195.22.182 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	nobody.yourvserver.net
Domain Name	netcup.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.195.22.182

Whois 159.195.22.182

IP Abuse Reports for 159.195.22.182:

This IP address has been reported a total of 37 times from 31 distinct sources. 159.195.22.182 was first reported on June 16th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Robert Gilliam	2026-06-17 02:40:14 (3 minutes ago)	Port scan / honeypot hit on ny.robgilm.com	Port Scan
🇦🇺 Block Rockin' Beats	2026-06-17 02:36:04 (7 minutes ago)	Attempted connection to TCP port 23	Port Scan
🇵🇱 Kitki30.com	2026-06-17 02:23:54 (19 minutes ago)	Entered Telnet Tarpit (endlessh). Log: 2026-06-17T02:23:53.809Z ACCEPT host=::ffff:159.195.22.182 po ... show more Entered Telnet Tarpit (endlessh). Log: 2026-06-17T02:23:53.809Z ACCEPT host=::ffff:159.195.22.182 port=57844 fd=1018 n=1020/1020 show less	IoT Targeted Port Scan Brute-Force
🇩🇪 Lazentis	2026-06-17 01:38:42 (1 hour ago)	Unauthorized access attempt to port 23 (tcp)	Brute-Force SSH
🇳🇱 ByeByte API	2026-06-17 00:48:20 (1 hour ago)	byebyte.space auth: TCP packet to port 2323 (high-risk service) at 2026-06-17T00:48:20Z. Source port ... show more byebyte.space auth: TCP packet to port 2323 (high-risk service) at 2026-06-17T00:48:20Z. Source port 56860. TCP flags: SYN. Packet: 40B, TTL 57, window 22393, IP id 43734. Single packet, dropped at firewall. p0f: 7 hops. show less	Port Scan
🇦🇹 centurion	2026-06-17 00:41:22 (2 hours ago)	Blocked by UFW on cloud [23/tcp] Source port: 64651 TTL: 58 Packet length: 40 TOS: 0x00 This report ... show more Blocked by UFW on cloud [23/tcp] Source port: 64651 TTL: 58 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-06-17 00:25:43 (2 hours ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-17 00:09:22 (2 hours ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇨🇭 pingusurmars	2026-06-16 23:58:23 (2 hours ago)	Blocked by UFW on ampereone [23/tcp] Source port: 64651 TTL: 58 Packet length: 40 TOS: 0x00 This re ... show more Blocked by UFW on ampereone [23/tcp] Source port: 64651 TTL: 58 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted Brute-Force
Anonymous	2026-06-16 23:26:03 (3 hours ago)	Jun 16 11:15:19 localhost kernel: [109968207.759614] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 16 11:15:19 localhost kernel: [109968207.759614] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=159.195.22.182 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=47729 PROTO=TCP SPT=45184 DPT=23 WINDOW=58414 RES=0x00 SYN URGP=0 Jun 16 11:15:19 localhost kernel: [109968207.759632] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=159.195.22.182 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=47729 PROTO=TCP SPT=45184 DPT=23 SEQ=758669438 ACK=0 WINDOW=58414 RES=0x00 SYN URGP=0 Jun 16 19:26:03 localhost kernel: [109997651.063260] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=159.195.22.182 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=40476 PROTO=TCP SPT=33375 DPT=23 WINDOW=8182 RES=0x00 SYN URGP=0 Jun 16 19:26:03 localhost kernel: [109997651.063286] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=159.195.22.182 DST=[mungedIP2] LEN=40 TOS=0x00 show less	Port Scan
🇺🇸 MPL	2026-06-16 23:16:32 (3 hours ago)	tcp/23 (3 or more attempts)	Port Scan
🇺🇸 sefinek.net	2026-06-16 23:05:38 (3 hours ago)	Blocked by UFW on NY01 [23/tcp] \| SPT: 45184 \| TTL: 51 \| LEN: 40 \| TOS: 0x08 • Reported by: github.c ... show more Blocked by UFW on NY01 [23/tcp] \| SPT: 45184 \| TTL: 51 \| LEN: 40 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇺🇸 MPL	2026-06-16 22:44:42 (3 hours ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-06-16 21:52:19 (4 hours ago)	2026-06-16 21:52:19 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇮 6kilowatti	2026-06-16 21:29:33 (5 hours ago)	2026-06-17T00:29:33.056980+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-06-17T00:29:33.056980+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=159.195.22.182 DST=5.61.88.83 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=425 PROTO=TCP SPT=56860 DPT=23 WINDOW=22393 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 194.50.235.145

🇳🇱 193.176.31.209

🇸🇪 158.174.210.161

🇺🇸 152.32.151.121

🇰🇷 144.24.71.92

🇵🇹 78.130.39.150

🇧🇬 78.128.114.174

🇺🇸 74.125.183.148

🇩🇪 65.111.27.159

🇺🇸 64.62.156.128

🇨🇳 39.145.3.217

🇺🇸 15.204.95.102

🇨🇦 199.21.149.124

🇺🇸 180.178.56.46

🇲🇽 131.196.246.121

🇺🇸 108.181.23.83

🇳🇬 102.88.137.80

🇳🇱 89.248.165.36

🇺🇸 74.125.76.27

🇩🇪 64.89.163.163