JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.164.49.70

195.164.49.70 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 8%: ?

ISP	NAUKOWA I AKADEMICKA SIEC KOMPUTEROWA - PANSTWOWY INSTYTUT BADAWCZY
Usage Type	University/College/School
ASN	AS8308
Hostname(s)	skanowanie.cert.pl
Domain Name	nask.pl
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.164.49.70

Whois 195.164.49.70

IP Abuse Reports for 195.164.49.70:

This IP address has been reported a total of 43 times from 16 distinct sources. 195.164.49.70 was first reported on November 14th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 MatStef132	2026-05-29 13:47:19 (3 weeks ago)	MatShield L7: blocked on wiki.mathost.eu (automation-ua)	DDoS Attack
🇫🇷 MatStef132	2026-05-16 13:07:51 (1 month ago)	MatShield L7: blocked on protection-core-01-panel.mathost.eu (cache-bust-detected)	DDoS Attack Bad Web Bot
🇵🇱 sondwich	2026-04-30 13:47:00 (1 month ago)	Observed suspicious POST request to non-existent or sensitive endpoint /servlet/FileReceiveServlet. ... show more Observed suspicious POST request to non-existent or sensitive endpoint /servlet/FileReceiveServlet. The request triggered a PHP warning: "Missing boundary in multipart/form-data", which often indicates a malformed automated exploit attempt or a vulnerability scan (file upload attack). Client IP: 195.164.49.70. show less	Exploited Host Web App Attack
🇩🇪 Ba-Yu	2026-04-10 13:48:48 (2 months ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 Ba-Yu	2026-04-07 00:55:06 (2 months ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇵🇱 MP.tv	2026-03-18 19:29:35 (3 months ago)	2026-03-13T14:00:32.314214+01:00 transfer-srv sshd[1949821]: Invalid user admin from 195.164.49.70 p ... show more 2026-03-13T14:00:32.314214+01:00 transfer-srv sshd[1949821]: Invalid user admin from 195.164.49.70 port 43632 2026-03-13T14:00:32.329577+01:00 transfer-srv sshd[1949821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.164.49.70 2026-03-13T14:00:34.185160+ ... show less	Brute-Force SSH
🇵🇱 sledzik1984	2026-01-31 03:33:39 (4 months ago)	2026/01/31 04:32:17 [error] 769#769: 683951 directory index of "/home/cmapl/wp-content/uploads/" is ... show more 2026/01/31 04:32:17 [error] 769#769: 683951 directory index of "/home/cmapl/wp-content/uploads/" is forbidden, client: 195.164.49.70, server: cma.pl, request: "GET /wp-content/uploads/ HTTP/1.1", host: "89.25.168.76" 195.164.49.70 - - [31/Jan/2026:04:32:46 +0100] "GET /sql/index.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" 195.164.49.70 - - [31/Jan/2026:04:33:38 +0100] "GET /web/phpMyAdmin/scripts/setup.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" ... show less	Web App Attack
🇵🇱 sledzik1984	2026-01-31 03:08:35 (4 months ago)	195.164.49.70 - - [31/Jan/2026:03:28:52 +0100] "GET / HTTP/1.1" 200 0 "referer'\x22" "Mozilla/5.0 (c ... show more 195.164.49.70 - - [31/Jan/2026:03:28:52 +0100] "GET / HTTP/1.1" 200 0 "referer'\x22" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)'\x22" 195.164.49.70 - - [31/Jan/2026:03:46:18 +0100] "GET /wordpress/wp-admin/admin-ajax.php HTTP/1.1" 400 11 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" 195.164.49.70 - - [31/Jan/2026:04:08:35 +0100] "GET /sql/index.php HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" ... show less	Web App Attack
🇵🇱 sledzik1984	2026-01-31 02:46:55 (4 months ago)	2026-01-31 03:46:47,240 cma proftpd[4109459] cma.pl (195.164.49.70[195.164.49.70]): USER anonymous: ... show more 2026-01-31 03:46:47,240 cma proftpd[4109459] cma.pl (195.164.49.70[195.164.49.70]): USER anonymous: no such user found from 195.164.49.70 [195.164.49.70] to ::ffff:192.168.15.131:21 2026-01-31 03:46:51,241 cma proftpd[4109461] cma.pl (195.164.49.70[195.164.49.70]): USER ftp (Login failed): Incorrect password 2026-01-31 03:46:52,319 cma proftpd[4109464] cma.pl (195.164.49.70[195.164.49.70]): USER admin: no such user found from 195.164.49.70 [195.164.49.70] to ::ffff:192.168.15.131:21 2026-01-31 03:46:53,569 cma proftpd[4109466] cma.pl (195.164.49.70[195.164.49.70]): USER admin: no such user found from 195.164.49.70 [195.164.49.70] to ::ffff:192.168.15.131:21 2026-01-31 03:46:54,825 cma proftpd[4109468] cma.pl (195.164.49.70[195.164.49.70]): USER admin: no such user found from 195.164.49.70 [195.164.49.70] to ::ffff:192.168.15.131:21 ... show less	Web App Attack
🇵🇱 sledzik1984	2026-01-31 01:32:21 (4 months ago)	195.164.49.70 - - [31/Jan/2026:01:41:22 +0100] "\x00\x00\x00\x96\x00\x00\x00\x01(client_hello" 400 1 ... show more 195.164.49.70 - - [31/Jan/2026:01:41:22 +0100] "\x00\x00\x00\x96\x00\x00\x00\x01(client_hello" 400 157 "-" "-" 195.164.49.70 - - [31/Jan/2026:01:41:56 +0100] "\x00\x00\x00\x96\x00\x00\x00\x01(client_hello" 400 157 "-" "-" 195.164.49.70 - - [31/Jan/2026:02:32:21 +0100] "\x00\x00\x00\x96\x00\x00\x00\x01(client_hello" 400 157 "-" "-" ... show less	Web App Attack
🇩🇪 roki.ovh	2025-12-15 10:48:33 (6 months ago)	[Mon Dec 15 01:38:57.955347 2025] [:error] [pid 12491] [client 195.164.49.70:54090] script '/var/www ... show more [Mon Dec 15 01:38:57.955347 2025] [:error] [pid 12491] [client 195.164.49.70:54090] script '/var/www/html/adminer.php' not found or unable to stat, referer: http://www.roki.ovh:80/adminer.php [Mon Dec 15 01:38:58.454678 2025] [:error] [pid 12756] [client 195.164.49.70:54108] script '/var/www/html/_adminer.php' not found or unable to stat, referer: http://www.roki.ovh:80/_adminer.php [Mon Dec 15 11:46:58.845383 2025] [:error] [pid 12203] [client 195.164.49.70:48458] script '/var/www/html/login.php' not found or unable to stat [Mon Dec 15 11:47:18.645969 2025] [:error] [pid 12201] [client 195.164.49.70:50704] script '/var/www/html/booking.php' not found or unable to stat [Mon Dec 15 11:48:18.046626 2025] [:error] [pid 12201] [client 195.164.49.70:33820] script '/var/www/html/product-details.php' not found or unable to stat [Mon Dec 15 11:48:31.063470 2025] [:error] [pid 27900] [client 195.164.49.70:50314] script '/var/www/html/install.php' not found or unable to stat ... show less	Hacking Web App Attack
🇩🇪 roki.ovh	2025-12-10 07:18:10 (6 months ago)	Dec 10 06:42:58 roki sshd[5595]: refused connect from 195.164.49.70 (195.164.49.70) Dec 10 06:42:58 ... show more Dec 10 06:42:58 roki sshd[5595]: refused connect from 195.164.49.70 (195.164.49.70) Dec 10 06:42:58 roki sshd[5597]: refused connect from 195.164.49.70 (195.164.49.70) Dec 10 06:48:42 roki sshd[6031]: refused connect from 195.164.49.70 (195.164.49.70) Dec 10 07:42:08 roki sshd[10325]: refused connect from 195.164.49.70 (195.164.49.70) Dec 10 08:18:08 roki sshd[13021]: refused connect from 195.164.49.70 (195.164.49.70) ... show less	Brute-Force SSH
🇩🇪 roki.ovh	2025-12-10 05:43:27 (6 months ago)	[Wed Dec 10 06:41:28.625138 2025] [:error] [pid 981] [client 195.164.49.70:44108] script '/var/www/h ... show more [Wed Dec 10 06:41:28.625138 2025] [:error] [pid 981] [client 195.164.49.70:44108] script '/var/www/html/boardDataWW.php' not found or unable to stat [Wed Dec 10 06:41:49.830649 2025] [:error] [pid 24488] [client 195.164.49.70:42054] script '/var/www/html/boardDataWW.php' not found or unable to stat [Wed Dec 10 06:42:14.911198 2025] [:error] [pid 981] [client 195.164.49.70:54314] script '/var/www/html/Side.php' not found or unable to stat [Wed Dec 10 06:42:17.042806 2025] [:error] [pid 24556] [client 195.164.49.70:56252] script '/var/www/html/test.php' not found or unable to stat [Wed Dec 10 06:42:27.601355 2025] [:error] [pid 30221] [client 195.164.49.70:52452] script '/var/www/html/login.php' not found or unable to stat [Wed Dec 10 06:43:25.592680 2025] [:error] [pid 24481] [client 195.164.49.70:57312] script '/var/www/html/videoseyret.php' not found or unable to stat ... show less	Hacking Web App Attack
🇩🇪 roki.ovh	2025-12-08 01:58:19 (6 months ago)	[Mon Dec 08 02:58:15.242824 2025] [:error] [pid 28342] [client 195.164.49.70:46350] script '/var/www ... show more [Mon Dec 08 02:58:15.242824 2025] [:error] [pid 28342] [client 195.164.49.70:46350] script '/var/www/html/cron.php' not found or unable to stat [Mon Dec 08 02:58:15.657901 2025] [:error] [pid 30574] [client 195.164.49.70:59180] script '/var/www/html/test3.php' not found or unable to stat [Mon Dec 08 02:58:16.010277 2025] [:error] [pid 27008] [client 195.164.49.70:59224] script '/var/www/html/test1.php' not found or unable to stat [Mon Dec 08 02:58:16.418478 2025] [:error] [pid 27752] [client 195.164.49.70:59284] script '/var/www/html/pinfo.php' not found or unable to stat [Mon Dec 08 02:58:16.800087 2025] [:error] [pid 27752] [client 195.164.49.70:59334] script '/var/www/html/5.php' not found or unable to stat [Mon Dec 08 02:58:17.409526 2025] [:error] [pid 26126] [client 195.164.49.70:59416] script '/var/www/html/wp-register.php' not found or unable to stat ... show less	Hacking Web App Attack
🇩🇪 roki.ovh	2025-12-05 21:14:57 (6 months ago)	[Fri Dec 05 22:13:14.312483 2025] [:error] [pid 32148] [client 195.164.49.70:46070] script '/var/www ... show more [Fri Dec 05 22:13:14.312483 2025] [:error] [pid 32148] [client 195.164.49.70:46070] script '/var/www/html/spip.php' not found or unable to stat [Fri Dec 05 22:14:20.545661 2025] [:error] [pid 32074] [client 195.164.49.70:49430] script '/var/www/html/debug.php' not found or unable to stat [Fri Dec 05 22:14:29.509881 2025] [:error] [pid 32230] [client 195.164.49.70:55188] script '/var/www/html/adminer.php' not found or unable to stat [Fri Dec 05 22:14:33.164690 2025] [:error] [pid 31519] [client 195.164.49.70:55210] script '/var/www/html/test.php' not found or unable to stat [Fri Dec 05 22:14:40.465038 2025] [:error] [pid 32071] [client 195.164.49.70:48366] script '/var/www/html/down_data.php' not found or unable to stat [Fri Dec 05 22:14:54.416029 2025] [:error] [pid 32313] [client 195.164.49.70:40628] script '/var/www/html/_adminer.php' not found or unable to stat ... show less	Hacking Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 185.15.189.232

🇳🇱 178.16.54.88

🇺🇸 64.62.156.109

🇪🇬 197.53.137.58

🇮🇳 182.95.177.158

🇧🇷 177.32.109.17

🇺🇸 107.174.120.129

🇳🇱 91.92.40.5

🇧🇬 79.124.56.250

🇧🇷 43.164.192.151

🇸🇬 43.160.250.64

🇺🇸 43.130.68.29

🇨🇳 36.111.150.151

🇺🇸 8.228.103.71

🇪🇨 205.235.2.176

🇮🇩 202.46.68.177

🇳🇱 195.178.110.241

🇳🇱 185.223.235.44

🇳🇱 176.65.139.249

🇺🇸 152.32.207.179