JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.164.49.71

195.164.49.71 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 17%: ?

17%

ISP	NAUKOWA I AKADEMICKA SIEC KOMPUTEROWA - PANSTWOWY INSTYTUT BADAWCZY
Usage Type	University/College/School
ASN	AS8308
Hostname(s)	skanowanie.cert.pl
Domain Name	nask.pl
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.164.49.71

Whois 195.164.49.71

IP Abuse Reports for 195.164.49.71:

This IP address has been reported a total of 112 times from 17 distinct sources. 195.164.49.71 was first reported on April 18th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-13 05:49:58 (1 week ago)	Aggressive web scan	Web App Attack
🇵🇱 MP.tv	2026-05-29 08:51:43 (3 weeks ago)	2026-05-29T07:15:13.404081+02:00 transfer-srv sshd[2933627]: Failed password for invalid user a3user ... show more 2026-05-29T07:15:13.404081+02:00 transfer-srv sshd[2933627]: Failed password for invalid user a3user from 195.164.49.71 port 34458 ssh2 2026-05-29T10:51:42.609483+02:00 transfer-srv sshd[3234290]: Connection from 195.164.49.71 port 36226 on 192.168.1.201 port 22 rdomain "" 2026-05-29T10:51:42.650155 ... show less	Brute-Force SSH
🇵🇱 wHosts	2026-05-19 20:48:48 (1 month ago)	Blocked by Fail2Ban	Web App Attack
🇵🇱 sondwich	2026-05-19 11:29:00 (1 month ago)	Automated exploit attempt targeting Yonyou NC MessageServlet RCE vulnerability via POST /servlet/~ba ... show more Automated exploit attempt targeting Yonyou NC MessageServlet RCE vulnerability via POST /servlet/~baseapp/nc.message.bs.NCMessageServlet. Host target: ocena360.mpwik.ibd.pl show less	Web App Attack Hacking
🇵🇱 wHosts	2026-05-18 15:00:58 (1 month ago)	Blocked by Fail2Ban	Web App Attack
🇵🇱 wHosts	2026-05-17 10:37:29 (1 month ago)	Blocked by Fail2Ban	Web App Attack
🇵🇱 wHosts	2026-05-14 11:27:50 (1 month ago)	Blocked by Fail2Ban	Web App Attack
🇵🇱 wHosts	2026-05-12 00:15:39 (1 month ago)	Blocked by Fail2Ban	FTP Brute-Force Brute-Force
🇫🇮 Rexikon	2026-04-13 17:54:16 (2 months ago)	195.164.49.71 - - [13/Apr/2026:19:54:11 +0200] "POST /wp-login.php HTTP/1.0" 200 14839 "-" "Mozilla/ ... show more 195.164.49.71 - - [13/Apr/2026:19:54:11 +0200] "POST /wp-login.php HTTP/1.0" 200 14839 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" 195.164.49.71 - - [13/Apr/2026:19:54:12 +0200] "POST /wp-login.php HTTP/1.0" 200 14839 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" 195.164.49.71 - - [13/Apr/2026:19:54:13 +0200] "POST /wp-login.php HTTP/1.0" 200 14839 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" 195.164.49.71 - - [13/Apr/2026:19:54:14 +0200] "POST /wp-login.php HTTP/1.0" 200 14839 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" 195.164.49.71 - - [13/Apr/2026:19:54:15 +0200] "POST /wp-login.php HTTP/1.0" 200 14839 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" ... show less	Brute-Force
🇫🇮 Rexikon	2026-04-11 00:46:45 (2 months ago)	195.164.49.71 - - [11/Apr/2026:02:46:40 +0200] "POST /wp-login.php HTTP/1.0" 200 14807 "-" "Mozilla/ ... show more 195.164.49.71 - - [11/Apr/2026:02:46:40 +0200] "POST /wp-login.php HTTP/1.0" 200 14807 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" 195.164.49.71 - - [11/Apr/2026:02:46:41 +0200] "POST /wp-login.php HTTP/1.0" 200 14807 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" 195.164.49.71 - - [11/Apr/2026:02:46:42 +0200] "POST /wp-login.php HTTP/1.0" 200 14807 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" 195.164.49.71 - - [11/Apr/2026:02:46:43 +0200] "POST /wp-login.php HTTP/1.0" 200 14807 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" 195.164.49.71 - - [11/Apr/2026:02:46:44 +0200] "POST /wp-login.php HTTP/1.0" 200 14807 "-" "Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie)" ... show less	Brute-Force
🇩🇪 Ba-Yu	2026-03-17 05:50:07 (3 months ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇵🇱 dcnet	2026-03-13 23:01:59 (3 months ago)	FortiGate detected DOS attack from IPv4 address 195.164.49.71	DDoS Attack
🇵🇱 dcnet	2026-03-12 07:01:18 (3 months ago)	FortiGate detected DOS attack from IPv4 address 195.164.49.71	DDoS Attack
🇫🇮 000rosiu	2026-02-23 06:55:23 (4 months ago)	Triggered Cloudflare WAF (firewallManaged) from PL. Action taken: BLOCK ASN: 8308 (NASK-COMMERCIAL) ... show more Triggered Cloudflare WAF (firewallManaged) from PL. Action taken: BLOCK ASN: 8308 (NASK-COMMERCIAL) Protocol: HTTP/1.1 (POST method) Endpoint: /suite-auth/login Timestamp: 2026-02-22T23:02:03Z Ray ID: 9d221bdd5ddcbfb2 UA: Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie) Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 000rosiu	2026-02-22 19:28:34 (4 months ago)	Triggered Cloudflare WAF (firewallManaged) from PL. Action taken: BLOCK ASN: 8308 (NASK-COMMERCIAL) ... show more Triggered Cloudflare WAF (firewallManaged) from PL. Action taken: BLOCK ASN: 8308 (NASK-COMMERCIAL) Protocol: HTTP/1.1 (POST method) Endpoint: /suite-auth/login Timestamp: 2026-02-22T13:03:07Z Ray ID: 9d1eae881c25f59c UA: Mozilla/5.0 (compatible; Artemis; CERT PL; +https://cert.pl/skanowanie) Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.107

🇺🇸 192.34.128.202

🇺🇸 162.216.150.185

🇮🇳 154.84.242.115

🇨🇳 120.231.24.245

🇩🇪 94.26.106.239

🇪🇸 46.25.152.174

🇹🇿 41.59.210.196

🇺🇸 20.163.15.19

🇺🇸 18.97.5.122

🇨🇳 218.201.184.241

🇹🇭 203.154.14.18

🇧🇷 201.16.238.49

🇺🇸 195.184.76.90

🇩🇪 193.124.20.253

🇺🇸 155.2.191.26

🇺🇸 91.230.168.127

🇪🇬 62.193.91.121

🇺🇸 50.87.144.147

🇧🇷 45.205.1.244