JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.182.16.23

195.182.16.23 was found in our database!

This IP was reported 478 times. Confidence of Abuse is 100%: ?

100%

ISP	Amarutu Technology Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206264
Domain Name	koddos.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.182.16.23

Whois 195.182.16.23

IP Abuse Reports for 195.182.16.23:

This IP address has been reported a total of 478 times from 245 distinct sources. 195.182.16.23 was first reported on July 16th 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 SeczarSecureOps	2026-07-19 14:15:42 (4 minutes ago)	Auto-blocked by Seczar SecureOps — Exposed Service Brute Force (6 events in 5min) at 2026-07-19 14:1 ... show more Auto-blocked by Seczar SecureOps — Exposed Service Brute Force (6 events in 5min) at 2026-07-19 14:15 show less	Web App Attack
🇺🇸 xmission.com	2026-07-19 14:09:20 (10 minutes ago)	Blocked by UFW (TCP on 8081) Source port: 40335 TTL: 237 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8081) Source port: 40335 TTL: 237 Packet length: 40 TOS: 0x08 This report (for 195.182.16.23) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Admins@FBN	2026-07-19 13:51:45 (28 minutes ago)	FW-PortScan: Traffic Blocked srcport=52542 dstport=8081	Port Scan
🇺🇸 xmission.com	2026-07-19 13:45:06 (34 minutes ago)	Blocked by UFW (TCP on 8081) Source port: 43735 TTL: 238 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8081) Source port: 43735 TTL: 238 Packet length: 40 TOS: 0x00 This report (for 195.182.16.23) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-07-19 13:39:17 (40 minutes ago)	195.182.16.23 was recorded 3 times by 2 hosts attempting to connect to 3 unique ports. Incident coun ... show more 195.182.16.23 was recorded 3 times by 2 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 12, 12 show less	Port Scan
🇨🇦 celestialcity	2026-07-19 13:32:20 (47 minutes ago)	Blocked by UFW on celestialcityna [8081/tcp] \| SPT: 35939 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityna [8081/tcp] \| SPT: 35939 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-19 13:28:12 (51 minutes ago)	Blocked by UFW (TCP on 8080) Source port: 59773 TTL: 238 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8080) Source port: 59773 TTL: 238 Packet length: 40 TOS: 0x00 This report (for 195.182.16.23) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇱🇹 NotACaptcha	2026-07-19 13:12:02 (1 hour ago)	Unauthorised access (Jul 19 16:12) SRC=195.182.16.23 LEN=40 TTL=246 ID=54321 TCP DPT=8080 WINDOW=655 ... show more Unauthorised access (Jul 19 16:12) SRC=195.182.16.23 LEN=40 TTL=246 ID=54321 TCP DPT=8080 WINDOW=65535 SYN Unauthorised access (Jul 19 06:40) SRC=195.182.16.23 LEN=40 TTL=246 ID=54321 TCP DPT=8080 WINDOW=65535 SYN show less	Port Scan
🇩🇪 banankicks	2026-07-19 13:10:03 (1 hour ago)	Unauthorized connection attempt detected from IP address 195.182.16.23 to port 8080 (banankicks-serv ... show more Unauthorized connection attempt detected from IP address 195.182.16.23 to port 8080 (banankicks-server) [x] show less	Brute-Force Exploited Host
🇺🇸 drewf.ink	2026-07-19 13:09:45 (1 hour ago)	[13:09] Attempted HTTP access to a Hikvision device SDK endpoint (/SDK/webLanguage) on the web honey ... show more [13:09] Attempted HTTP access to a Hikvision device SDK endpoint (/SDK/webLanguage) on the web honeypot - likely CVE-2021-36260 reconnaissance show less	Web App Attack
🇺🇸 xmission.com	2026-07-19 13:00:26 (1 hour ago)	Blocked by UFW (TCP on 8080) Source port: 40209 TTL: 235 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8080) Source port: 40209 TTL: 235 Packet length: 40 TOS: 0x00 This report (for 195.182.16.23) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 David Ferneding	2026-07-19 12:53:36 (1 hour ago)	Blocked by UFW (TCP on 8080) Source port: 59783 TTL: 245 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8080) Source port: 59783 TTL: 245 Packet length: 40 TOS: 0x00 This report (for 195.182.16.23) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 Admins@FBN	2026-07-19 12:48:05 (1 hour ago)	FW-PortScan: Traffic Blocked srcport=34002 dstport=8080	Port Scan
🇺🇸 drewf.ink	2026-07-19 12:47:17 (1 hour ago)	[12:47] Attempted HTTP access to a Hikvision device SDK endpoint (/SDK/webLanguage) on the web honey ... show more [12:47] Attempted HTTP access to a Hikvision device SDK endpoint (/SDK/webLanguage) on the web honeypot - likely CVE-2021-36260 reconnaissance show less	Web App Attack
🇺🇸 MPL	2026-07-19 12:47:14 (1 hour ago)	tcp ports: 8080,8081 (98 or more attempts)	Port Scan

Showing 1 to 15 of 478 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 181.123.136.11

🇺🇸 172.217.46.29

🇷🇴 92.118.39.77

🇺🇸 134.202.181.207

🇨🇳 120.48.174.141

🇬🇭 80.87.83.229

🇫🇮 65.109.182.128

🇺🇸 65.49.20.124

🇨🇳 42.229.45.11

🇺🇸 35.237.249.104

🇺🇸 18.189.74.1

🇨🇳 14.103.118.79

🇹🇷 2a00:1d34:2e54:2d01:926:468a:d57b:a55f

🇪🇸 196.196.150.124

🇺🇸 188.241.177.229

🇩🇪 185.220.70.83

🇩🇰 151.216.96.228

🇺🇸 134.202.181.191

🇺🇸 64.62.156.214

🇺🇸 45.79.109.4