JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.206.105.166

195.206.105.166 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 52%: ?

52%

ISP	M247 LTD Zurich Dedicated Servers
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.206.105.166

Whois 195.206.105.166

IP Abuse Reports for 195.206.105.166:

This IP address has been reported a total of 27 times from 21 distinct sources. 195.206.105.166 was first reported on November 28th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-10 07:25:15 (1 week ago)	"GET /.svn/wc.db HTTP/1.1"	Hacking Web App Attack
Anonymous	2026-06-10 06:59:27 (1 week ago)	"GET /.aws/credentials HTTP/1.1"	Hacking Web App Attack
🇵🇱 stareradia.pl	2026-06-10 06:25:19 (1 week ago)	[Wed Jun 10 08:23:20.402733 2026] [php:error] [pid 236866:tid 236866] [client 195.206.105.166:0] scr ... show more [Wed Jun 10 08:23:20.402733 2026] [php:error] [pid 236866:tid 236866] [client 195.206.105.166:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ [Wed Jun 10 08:24:02.043315 2026] [php:error] [pid 307797:tid 307797] [client 195.206.105.166:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ [Wed Jun 10 08:24:05.374510 2026] [php:error] [pid 294484:tid 294484] [client 195.206.105.166:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ucp.php?mode=register&agreed=true&iscanyesno=yeswecan&step=2&coppa=0 [Wed Jun 10 08:25:18.113960 2026] [php:error] [pid 236866:tid 236866] [client 195.206.105.166:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ ... show less	Web App Attack
Anonymous	2026-06-10 04:22:02 (1 week ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-06-10 01:57:19 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-10 01:07:01 (1 week ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 ManagedStack	2026-06-10 00:00:12 (1 week ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇫🇷 Vaction	2026-06-09 23:39:22 (1 week ago)	195.206.105.166 - - [10/Jun/2026:01:39:22 +0200] "GET /.svn/wc.db HTTP/1.1" 404 381 "-" "Mozilla/5.0 ... show more 195.206.105.166 - - [10/Jun/2026:01:39:22 +0200] "GET /.svn/wc.db HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" show less	Hacking Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-06-09 23:38:57 (1 week ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 195.206.105.166 (CH/Switzerland/-): 2 in ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 195.206.105.166 (CH/Switzerland/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 195.206.105.166 - - [10/Jun/2026:01:13:57 +0200] "GET /.aws/credentials HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "134.209.199.191" host=www.smart-app.cloud 195.206.105.166 - - [10/Jun/2026:01:38:26 +0200] "GET /.aws/credentials HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "134.209.199.191" host=ns1.spacehosting.ovh show less	Port Scan
🇫🇮 inlink.ltd	2026-06-09 23:08:43 (1 week ago)	dot file probe	Web App Attack
🇷🇺 punctualsuspension968	2026-06-04 11:16:54 (2 weeks ago)	blocked by ufw on TCP 48177	Port Scan
Anonymous	2026-05-25 04:45:41 (4 weeks ago)	Attack Signature Blocked: /wishlist/index/add/product/147/form_key/NPp0FHgKP7DAq4BO/ (Magento Site) ... show more Attack Signature Blocked: /wishlist/index/add/product/147/form_key/NPp0FHgKP7DAq4BO/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-15 00:51:38 (1 month ago)	2026-05-14 03:22:13 /.env 2026-05-14 03:24:27 /,{"body":"debug=true","content_type":"application/x-w ... show more 2026-05-14 03:22:13 /.env 2026-05-14 03:24:27 /,{"body":"debug=true","content_type":"application/x-www-form-urlencoded","header":{"Accept":["/"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Content-Length":["10"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["python-requests/2.33.1"]},"host":"52.83.87.21","method":"POST","proto":"HTTP/1.1","remote_addr":"195.206.105.166:54770","status_code":200,"url":"/","user_agent":"python-requests/2.33.1"} show less	Web App Attack
🇧🇪 taivas.nl	2026-05-14 06:02:02 (1 month ago)	Wordpress_Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-04-08 04:18:33 (2 months ago)	(mod_security) mod_security (id:240000) triggered by 195.206.105.166 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 195.206.105.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 00:18:25.980141 2026] [security2:error] [pid 2338349:tid 2338349] [client 195.206.105.166:41286] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|med-engineering.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "med-engineering.com"] [uri "/images/stories/themes.php"] [unique_id "adXXEdbe_AbnneqT94QS7gAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.38.70.156

🇨🇳 218.76.158.186

🇧🇷 201.23.102.250

🇨🇱 179.60.66.147

🇮🇳 139.167.225.146

🇨🇳 139.9.191.197

🇨🇳 112.86.225.81

🇮🇩 103.187.117.19

🇬🇧 92.113.78.90

🇺🇸 76.33.65.146

🇵🇾 38.134.188.184

🇺🇸 34.138.49.31

🇳🇱 5.61.209.92

🇬🇧 193.163.125.240

🇳🇱 176.65.139.232

🇮🇳 175.101.156.233

🇮🇳 125.19.182.118

🇮🇳 122.164.81.227

🇿🇦 102.249.36.28

🇺🇸 98.97.141.42