JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.164.49.68

195.164.49.68 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 30%: ?

30%

ISP	NAUKOWA I AKADEMICKA SIEC KOMPUTEROWA - PANSTWOWY INSTYTUT BADAWCZY
Usage Type	University/College/School
ASN	AS8308
Hostname(s)	skanowanie.cert.pl
Domain Name	nask.pl
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.164.49.68

Whois 195.164.49.68

IP Abuse Reports for 195.164.49.68:

This IP address has been reported a total of 102 times from 18 distinct sources. 195.164.49.68 was first reported on March 11th 2023, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 lns.bz	2026-06-10 22:00:04 (11 hours ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇧🇷 ICS Labs	2026-06-09 19:28:04 (1 day ago)	ICS Labs identified 195.164.49.68 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇵🇱 lns.bz	2026-06-09 17:39:38 (1 day ago)	Too many 404 requests [BY]	Web App Attack
🇵🇱 lns.bz	2026-06-09 17:11:21 (1 day ago)	SSH bruteforce [BY]	SSH
🇩🇪 roki.ovh	2026-06-04 06:57:12 (1 week ago)	[Thu Jun 04 08:54:29.748397 2026] [:error] [pid 13292] [client 195.164.49.68:56934] script '/var/www ... show more [Thu Jun 04 08:54:29.748397 2026] [:error] [pid 13292] [client 195.164.49.68:56934] script '/var/www/html/emHBLEJ89F.php' not found or unable to stat [Thu Jun 04 08:56:10.660588 2026] [:error] [pid 13292] [client 195.164.49.68:44262] script '/var/www/html/css_parser.php' not found or unable to stat [Thu Jun 04 08:56:56.045165 2026] [:error] [pid 13334] [client 195.164.49.68:34320] script '/var/www/html/admin.php' not found or unable to stat [Thu Jun 04 08:57:08.337350 2026] [:error] [pid 13334] [client 195.164.49.68:55448] script '/var/www/html/admin_dev.php' not found or unable to stat [Thu Jun 04 08:57:09.344161 2026] [:error] [pid 13265] [client 195.164.49.68:55460] script '/var/www/html/index_dev.php' not found or unable to stat [Thu Jun 04 08:57:10.242023 2026] [:error] [pid 13266] [client 195.164.49.68:55462] script '/var/www/html/app_dev.php' not found or unable to stat ... show less	Hacking Web App Attack
🇫🇮 Rexikon	2026-06-03 16:57:59 (1 week ago)	Jun 3 18:57:51 plesk proftpd[1052497]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOL ... show more Jun 3 18:57:51 plesk proftpd[1052497]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 18:57:54 plesk proftpd[1052503]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 18:57:56 plesk proftpd[1052539]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 18:57:58 plesk proftpd[1052542]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 18:57:59 plesk proftpd[1052546]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted ... show less	Brute-Force FTP Brute-Force
🇫🇮 Rexikon	2026-06-03 15:51:24 (1 week ago)	Jun 3 17:51:15 plesk proftpd[946815]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLA ... show more Jun 3 17:51:15 plesk proftpd[946815]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 17:51:18 plesk proftpd[946821]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 17:51:21 plesk proftpd[946880]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 17:51:22 plesk proftpd[946900]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 17:51:23 plesk proftpd[946905]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted ... show less	Brute-Force FTP Brute-Force
🇫🇮 Rexikon	2026-06-03 15:16:00 (1 week ago)	Jun 3 17:15:51 plesk proftpd[870444]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLA ... show more Jun 3 17:15:51 plesk proftpd[870444]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 17:15:54 plesk proftpd[870449]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 17:15:56 plesk proftpd[870459]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 17:15:58 plesk proftpd[870473]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted Jun 3 17:15:59 plesk proftpd[870515]: 65.21.136.116 (195.164.49.68[195.164.49.68]) - SECURITY VIOLATION: Root login attempted ... show less	Brute-Force FTP Brute-Force
🇩🇪 roki.ovh	2026-06-01 12:29:54 (1 week ago)	[Mon Jun 01 14:29:49.307733 2026] [:error] [pid 5663] [client 195.164.49.68:40390] script '/var/www/ ... show more [Mon Jun 01 14:29:49.307733 2026] [:error] [pid 5663] [client 195.164.49.68:40390] script '/var/www/html/file.php' not found or unable to stat [Mon Jun 01 14:29:49.673760 2026] [:error] [pid 26222] [client 195.164.49.68:40460] script '/var/www/html/auth.php' not found or unable to stat [Mon Jun 01 14:29:49.891684 2026] [:error] [pid 5653] [client 195.164.49.68:40492] script '/var/www/html/test2.php' not found or unable to stat [Mon Jun 01 14:29:50.079136 2026] [:error] [pid 5674] [client 195.164.49.68:40516] script '/var/www/html/download.php' not found or unable to stat [Mon Jun 01 14:29:50.593261 2026] [:error] [pid 21493] [client 195.164.49.68:40592] script '/var/www/html/status.php' not found or unable to stat [Mon Jun 01 14:29:51.620830 2026] [:error] [pid 21533] [client 195.164.49.68:40734] script '/var/www/html/install.php' not found or unable to stat ... show less	Hacking Web App Attack
🇩🇪 roki.ovh	2026-06-01 11:25:32 (1 week ago)	Jun 1 13:20:34 roki sshd[25886]: refused connect from 195.164.49.68 (195.164.49.68) Jun 1 13:25:22 ... show more Jun 1 13:20:34 roki sshd[25886]: refused connect from 195.164.49.68 (195.164.49.68) Jun 1 13:25:22 roki sshd[26287]: refused connect from 195.164.49.68 (195.164.49.68) Jun 1 13:25:24 roki sshd[26290]: refused connect from 195.164.49.68 (195.164.49.68) Jun 1 13:25:26 roki sshd[26293]: refused connect from 195.164.49.68 (195.164.49.68) Jun 1 13:25:30 roki sshd[26298]: refused connect from 195.164.49.68 (195.164.49.68) ... show less	Brute-Force SSH
🇵🇱 bmino.pl	2026-04-12 20:18:19 (1 month ago)	Autoban IP(2): unknown - Hostname: unknown - City: unknown - Region: unknown - Country: unknown - Lo ... show more Autoban IP(2): unknown - Hostname: unknown - City: unknown - Region: unknown - Country: unknown - Location: unknown - Organization: unknown - failed attempts. show less	SSH
🇩🇪 Ba-Yu	2026-03-14 23:54:36 (2 months ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 Ba-Yu	2026-03-10 19:24:39 (3 months ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇵🇱 MP.tv	2026-02-20 21:41:58 (3 months ago)	2026-02-20T22:22:55.428543+01:00 transfer-srv sshd[1423533]: Invalid user admin from 195.164.49.68 p ... show more 2026-02-20T22:22:55.428543+01:00 transfer-srv sshd[1423533]: Invalid user admin from 195.164.49.68 port 36096 2026-02-20T22:22:55.441371+01:00 transfer-srv sshd[1423533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.164.49.68 2026-02-20T22:22:57.886052+ ... show less	Brute-Force SSH
🇩🇪 updown.io	2026-02-13 20:09:18 (3 months ago)	{"level":"info","ts":1771013222.482574,"logger":"http.log.access.log1","msg":"handled request","requ ... show more {"level":"info","ts":1771013222.482574,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"195.164.49.68","remote_port":"48252","client_ip":"195.164.49.68","proto":"HTTP/1.1","method":"GET","host":"status.mobigol.pl","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)"],"Accept-Encoding":["gzip, deflate"],"Accept":["/"],"Connection":["keep-alive"]}},"bytes_read":0,"user_id":"","duration":0.000046229,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.mobigol.pl/"],"Content-Type":[]}} {"level":"info","ts":1771013251.6854198,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"195.164.49.68","remote_port":"33546","client_ip":"195.164.49.68","proto":"HTTP/1.1","method":"POST","host":"status.mobigol.pl","uri":"/wsman","headers":{"User-Agent":["Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)"],"Connec ... show less	DDoS Attack Web App Attack

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 136.110.77.61

🇨🇳 120.235.42.151

🇩🇰 85.203.47.39

🇦🇿 62.217.138.153

🇳🇱 45.148.10.151

🇺🇸 35.236.43.68

🇧🇪 35.233.83.211

🇺🇸 20.237.254.23

🇫🇷 167.86.117.136

🇭🇰 112.119.21.245

🇺🇸 104.243.133.18

🇵🇰 103.163.254.107

🇭🇰 101.36.111.119

🇳🇱 93.123.109.105

🇺🇸 66.228.36.21

🇺🇸 66.132.172.138

🇧🇷 200.0.57.80

🇸🇬 193.37.32.198

🇸🇬 193.37.32.194

🇳🇱 185.242.226.90