JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.160.206.226

195.160.206.226 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 66%: ?

66%

ISP	Chervonograd, Lviv region, Ukraine
Usage Type	Fixed Line ISP
ASN	AS49480
Domain Name	v-gal.com
Country	🇺🇦 Ukraine
City	Sheptytskyi, Lviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.160.206.226

Whois 195.160.206.226

IP Abuse Reports for 195.160.206.226:

This IP address has been reported a total of 26 times from 14 distinct sources. 195.160.206.226 was first reported on July 19th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-08-26 15:29:40 (4 hours ago)	tcp ports: 23,22 (12 or more attempts)	Port Scan
🇺🇸 micropedro	2026-08-25 21:09:33 (22 hours ago)	4 incidents: malicious activity. First: 2026-08-20 06:47, Last: 2026-08-25 17:09 UTC. Triggers: unkn ... show more 4 incidents: malicious activity. First: 2026-08-20 06:47, Last: 2026-08-25 17:09 UTC. Triggers: unknown. show less	Port Scan
🇺🇸 MPL	2026-08-24 18:10:28 (2 days ago)	tcp ports: 23,22 (16 or more attempts)	Port Scan
🇸🇬 garrymenata	2026-08-23 21:36:39 (2 days ago)	195.160.206.226 - - [24/Aug/2026:01:19:00 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; ... show more 195.160.206.226 - - [24/Aug/2026:01:19:00 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 195.160.206.226 - - [24/Aug/2026:01:19:03 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 195.160.206.226 - - [24/Aug/2026:01:19:07 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
Anonymous	2026-08-23 07:00:53 (3 days ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇺🇸 xmission.com	2026-08-22 15:27:34 (4 days ago)	Blocked by UFW (TCP on 23) Source port: 38110 TTL: 47 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 38110 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 195.160.206.226) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇦🇷 Bruno	2026-08-21 16:44:36 (5 days ago)	Port Scanner: 195.160.206.226	Port Scan
🇫🇷 Zkillu	2026-08-20 19:10:36 (6 days ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS215599. This IP (AS49480) sent ~35089 packets (2.28 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-20 18:46:47 (6 days ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 18:41:47 -> 2026-08-20 18:56:47 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 18:41:47 -> 2026-08-20 18:56:47 UTC) targeting AS215599. This IP (AS49480) sent ~4605 packets (6.54 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-20 16:05:36 (6 days ago)	DDoS flood attack against 82.152.54.0 (2026-08-20 16:00:36 -> 2026-08-20 16:15:36 UTC) targeting AS2 ... show more DDoS flood attack against 82.152.54.0 (2026-08-20 16:00:36 -> 2026-08-20 16:15:36 UTC) targeting AS215599. This IP (AS49480) sent ~12263 packets (17.43 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇮🇹 RaffOne	2026-08-20 11:20:13 (6 days ago)	SSH - Attempt to login using invalid or illegal credential	Brute-Force SSH
Anonymous	2026-08-19 19:49:13 (6 days ago)	PROTO=TCP DPT=23	Port Scan Hacking
🇫🇷 Zkillu	2026-08-19 19:48:08 (6 days ago)	UDP flood (DDoS) vs AS215599: 8 pkts / 0.01 MB to UDP 80 across 8 dst IP(s), 2026-08-19 21:46 to 202 ... show more UDP flood (DDoS) vs AS215599: 8 pkts / 0.01 MB to UDP 80 across 8 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 19:48:08 (6 days ago)	UDP flood (DDoS) vs AS215599: 8 pkts / 0.01 MB to UDP 80 across 8 dst IP(s), 2026-08-19 21:46 to 202 ... show more UDP flood (DDoS) vs AS215599: 8 pkts / 0.01 MB to UDP 80 across 8 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 xmission.com	2026-08-19 16:33:51 (1 week ago)	Blocked by UFW (TCP on 22) Source port: 55408 TTL: 47 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 55408 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 195.160.206.226) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a00:1450:4013:c05::12b

🇳🇱 195.178.110.52

🇳🇱 193.47.62.69

🇳🇱 91.92.40.48

🇨🇳 59.46.182.10

🇰🇪 102.210.148.92

🇩🇪 92.208.251.216

🇧🇬 79.124.56.110

🇳🇱 45.148.10.157

🇺🇸 20.64.106.29

🇦🇹 194.166.42.233

🇺🇸 169.136.32.201

🇧🇬 79.124.40.150

🇩🇪 69.5.169.16

🇱🇹 213.176.26.194

🇸🇪 90.230.179.175

🇺🇦 37.53.153.149

🇨🇳 36.133.176.124

🇹🇼 104.199.225.153

🇳🇱 91.92.47.140