JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.195.81.179

159.195.81.179 was found in our database!

This IP was reported 187 times. Confidence of Abuse is 100%: ?

100%

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	v2202605301870456635.ultrasrv.de
Domain Name	netcup.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.195.81.179

Whois 159.195.81.179

IP Abuse Reports for 159.195.81.179:

This IP address has been reported a total of 187 times from 98 distinct sources. 159.195.81.179 was first reported on July 13th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 reznekcs	2026-07-16 05:03:01 (1 day ago)	Blocked by UFW firewall	Brute-Force
🇧🇷 SSP	2026-07-15 13:40:20 (2 days ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Brute Force, Port Scan ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Brute Force, Port Scan Occurrences: 26 Unique Ports: 13 Destination Ports: 9001, 80, 8006, 8443, 443, 10443, 3001, 9443, 7001, 8080, 4443, 445, 3389 First Seen: 2026-07-14 13:35 UTC Last Seen: 2026-07-14 21:25 UTC show less	Port Scan Brute-Force
Anonymous	2026-07-15 10:04:14 (2 days ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇮🇳 evicky2002	2026-07-15 06:00:00 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇮🇹 kgreen	2026-07-14 22:00:59 (3 days ago)	Graylog firewall DROP detected. Hits=1014, ASN=AS197540, Provider=netcup GmbH, Country=DE, Range=159 ... show more Graylog firewall DROP detected. Hits=1014, ASN=AS197540, Provider=netcup GmbH, Country=DE, Range=159.195.80.0/22, AbuseScore=100, Reports=140 show less	Port Scan Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇨🇿 Countryman	2026-07-14 21:21:44 (3 days ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇩🇪 acadeova	2026-07-14 21:10:58 (3 days ago)	Blocked by UFW on vps4 [8080/tcp] Source port: 43131 TTL: 58 Packet length: 52 TOS: 0x00 This repor ... show more Blocked by UFW on vps4 [8080/tcp] Source port: 43131 TTL: 58 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 iNetWorker	2026-07-14 21:10:53 (3 days ago)	firewall-block, port(s): 4443/tcp, 9001/tcp	Port Scan
🇺🇸 SSP	2026-07-14 21:10:27 (3 days ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 20 Unique Ports: 11 Destination Ports: 9001, 3001, 8006, 9443, 10443, 445, 8443, 443, 8008, 7001, 8080 First Seen: 2026-07-14 09:40 UTC Last Seen: 2026-07-14 21:10 UTC show less	Port Scan
🇺🇸 xmission.com	2026-07-14 21:08:40 (3 days ago)	Blocked by UFW (TCP on 8006) Source port: 58962 TTL: 44 Packet length: 52 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8006) Source port: 58962 TTL: 44 Packet length: 52 TOS: 0x08 This report (for 159.195.81.179) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-07-14 20:59:21 (3 days ago)	[RoutePulse \| 2026-07-14T20:59:21Z] ATTACK: Threat IP Active SOURCE: 159.195.81.179 (v22026053018704 ... show more [RoutePulse \| 2026-07-14T20:59:21Z] ATTACK: Threat IP Active SOURCE: 159.195.81.179 (v2202605301870456635.ultrasrv.de) · AS197540 netcup GmbH · Germany EVIDENCE: severity=warning · 10 flows · 66 KB INTEL: AbuseIPDB 100% (38 reports) \| RoutePulse score 91/100 24H PERSISTENCE: 57 events (SIEM Firewall Scan×55, Threat IP Active×1, Host Baseline Shift×1) CONVICTION: Tier 4, LLR 9.11, 3 independent groups (multi-source SPRT) MITRE: T1071 Application Layer Protocol DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Hacking Exploited Host
🇺🇸 MPL	2026-07-14 20:50:36 (3 days ago)	tcp port scan (20 or more attempts)	Port Scan
🇫🇮 sonot	2026-07-14 20:39:46 (3 days ago)	Blocked by UFW on mail [8443/tcp] \| SPT: 39156 \| TTL: 49 \| LEN: 52 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on mail [8443/tcp] \| SPT: 39156 \| TTL: 49 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 sthoyer.de	2026-07-14 20:35:05 (3 days ago)	Jul 14 22:35:04 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 14 22:35:04 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=159.195.81.179 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=64517 PROTO=TCP SPT=49729 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 sonot	2026-07-14 20:02:53 (3 days ago)	Blocked by UFW on tunneluk01 [2242/tcp] \| SPT: 47230 \| TTL: 53 \| LEN: 52 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [2242/tcp] \| SPT: 47230 \| TTL: 53 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 187 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇹 213.225.14.121

🇹🇼 198.235.24.51

🇺🇸 162.246.24.154

🇺🇸 161.129.211.56

🇫🇷 144.91.68.95

🇨🇦 85.217.149.59

🇺🇸 64.62.197.39

🇫🇮 45.130.127.173

🇬🇧 37.143.61.84

🇬🇧 35.203.211.168

🇺🇸 198.199.81.214

🇧🇷 189.18.54.233

🇬🇧 188.209.126.160

🇰🇷 183.106.21.33

🇪🇸 158.158.113.194

🇺🇸 154.6.126.165

🇵🇭 143.44.184.79

🇲🇾 113.211.215.175

🇮🇳 103.180.212.135

🇿🇦 102.129.60.213