JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.206.105.164

195.206.105.164 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 19%: ?

19%

ISP	M247 LTD Zurich Dedicated Servers
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.206.105.164

Whois 195.206.105.164

IP Abuse Reports for 195.206.105.164:

This IP address has been reported a total of 12 times from 10 distinct sources. 195.206.105.164 was first reported on November 28th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 matthieul.dev	2026-06-21 22:00:35 (1 week ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp,udp, ports=64427	Port Scan Brute-Force
🇺🇸 xmission.com	2026-06-20 09:06:39 (1 week ago)	Blocked by UFW (TCP on 35691) Source port: 57352 TTL: 41 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 35691) Source port: 57352 TTL: 41 Packet length: 60 TOS: 0x08 This report (for 195.206.105.164) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 nowyouknow	2026-05-25 00:00:01 (1 month ago)	(From [email protected]) Greetings, Frustrated with swimsuits that block your perfe ... show more (From [email protected]) Greetings, Frustrated with swimsuits that block your perfect tan? Our exclusive cut-outs and fabrics let the sun hit evenly. Get the perfect beach look while staying comfortable and elegant. See our exclusive designs at https://tanthroughboutique.shop Shine bright with our exclusive swimwear. show less	Phishing Web Spam
🇫🇷 dynamix	2026-04-07 19:09:36 (2 months ago)	Multiple WAF Violations	Web App Attack
🇦🇹 neo72	2026-04-06 11:17:21 (2 months ago)	Blocked via IPShield	Brute-Force Web App Attack
🇩🇪 Ba-Yu	2026-04-02 00:30:04 (2 months ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇫🇮 Ticlem	2026-02-13 12:07:32 (4 months ago)	2026-02-13T12:38:52.402755+01:00 clement-turlure kernel: [405142.049280] [UFW BLOCK] IN=enp0s31f6 OU ... show more 2026-02-13T12:38:52.402755+01:00 clement-turlure kernel: [405142.049280] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=195.206.105.164 DST=95.216.21.136 LEN=159 TOS=0x00 PREC=0x00 TTL=50 ID=32795 PROTO=UDP SPT=49001 DPT=6881 LEN=139 2026-02-13T12:44:01.557635+01:00 clement-turlure kernel: [405451.203809] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=195.206.105.164 DST=95.216.21.136 LEN=159 TOS=0x00 PREC=0x00 TTL=50 ID=55205 PROTO=UDP SPT=49001 DPT=6881 LEN=139 2026-02-13T13:07:31.865476+01:00 clement-turlure kernel: [406861.510358] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=195.206.105.164 DST=95.216.21.136 LEN=159 TOS=0x00 PREC=0x00 TTL=50 ID=40033 PROTO=UDP SPT=49001 DPT=6881 LEN=139 ... show less	Port Scan
🇳🇱 Site.eu	2025-12-04 00:42:59 (6 months ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2025-11-30 07:22:42 (6 months ago)	(mod_security) mod_security (id:240000) triggered by 195.206.105.164 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 195.206.105.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 30 02:22:34.724761 2025] [security2:error] [pid 3939:tid 3939] [client 195.206.105.164:44382] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|mrbss.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "mrbss.com"] [uri "/images/stories/themes.php"] [unique_id "aSvwum0G4NJaPDHRE5W9NgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 17:08:48 (6 months ago)	(mod_security) mod_security (id:240000) triggered by 195.206.105.164 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 195.206.105.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 12:08:40.533446 2025] [security2:error] [pid 21012:tid 21140] [client 195.206.105.164:44854] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|idwic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "idwic.com"] [uri "/images/stories/themes.php"] [unique_id "aSsomFB6Ciy7UdyBld80DwAAANA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-29 10:23:10 (6 months ago)	Fail2Ban apache-noscript	Bad Web Bot
🇫🇷 dynamix	2025-11-28 06:31:12 (7 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.13.244.29

🇳🇱 91.92.40.25

🇱🇹 82.197.202.70

🇳🇱 45.148.10.121

🇹🇷 31.223.14.15

🇺🇸 31.57.52.223

🇧🇷 20.206.104.0

🇬🇧 193.32.209.237

🇮🇳 103.88.76.27

🇫🇷 85.217.140.23

🇺🇸 72.17.34.38

🇷🇺 37.79.131.48

🇷🇺 217.168.240.63

🇳🇱 217.60.241.46

🇭🇳 190.109.214.220

🇳🇱 176.65.139.239

🇺🇸 104.152.52.222

🇲🇾 52.112.49.157

🇳🇱 45.148.10.240

🇨🇳 39.129.119.45