JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.206.182.217

195.206.182.217 was found in our database!

This IP was reported 1,318 times. Confidence of Abuse is 100%: ?

100%

ISP	Infrawatch Limited
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	195-206-182-217.infrawat.ch
Domain Name	infrawat.ch
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.206.182.217

Whois 195.206.182.217

IP Abuse Reports for 195.206.182.217:

This IP address has been reported a total of 1,318 times from 169 distinct sources. 195.206.182.217 was first reported on April 24th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-04-27 01:05:03 (1 month ago)	tcp/39827 (2 or more attempts)	Port Scan
🇳🇱 COMPLEX	2026-04-27 00:28:33 (1 month ago)	Unsolicited TCP traffic \| Action: DROP \| Port 9767	Brute-Force
🇺🇸 MPL	2026-04-26 23:14:56 (1 month ago)	tcp/39764 (6 or more attempts)	Port Scan
🇺🇸 technash	2026-04-26 23:07:40 (1 month ago)	Unauthorized network connection attempt(s) via TCP port(s) from TI-mapped IP entity detected [Fortin ... show more Unauthorized network connection attempt(s) via TCP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel]. Deny/drop traffic. show less	Port Scan
🇦🇹 urnilxfgbez	2026-04-26 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-04-26 22:16:54 (1 month ago)	tcp/52674 (2 or more attempts)	Port Scan
Anonymous	2026-04-26 20:35:45 (1 month ago)	unsolicited connect TCP dport 2993 (sport 42867)	Hacking
🇺🇸 MPL	2026-04-26 20:07:14 (1 month ago)	tcp/45483 (2 or more attempts)	Port Scan
🇫🇮 6kilowatti	2026-04-26 18:33:03 (1 month ago)	2026-04-26T21:33:02.948253+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-04-26T21:33:02.948253+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=195.206.182.217 DST=5.61.88.83 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=0 PROTO=TCP SPT=23911 DPT=34392 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 LSPCCU	2026-04-26 18:08:18 (1 month ago)	TSEC Honeypot Network report. Threat score: 65/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 65/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 195. show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇦🇺 LiftUp Hosting	2026-04-26 17:33:02 (1 month ago)	Honeypot hit: HTTP request on 21576 �	Hacking Bad Web Bot
🇺🇸 MPL	2026-04-26 17:09:02 (1 month ago)	tcp ports: 38350,62244 (8 or more attempts)	Port Scan
🇬🇧 gbzret4d	2026-04-26 17:04:44 (1 month ago)	Honeypot [uk-production01]: HTTP/1.1 request on 52869 GET / User-Agent: Mozilla/5.0 (compatible; In ... show more Honeypot [uk-production01]: HTTP/1.1 request on 52869 GET / User-Agent: Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) Accept: / Accept-Encoding: gzip; 52869 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-04-26 16:32:46 (1 month ago)	tcp/3636 (2 or more attempts)	Port Scan
🇺🇸 rellim.com	2026-04-26 15:49:04 (1 month ago)	Apr 26 08:07:33 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:0 ... show more Apr 26 08:07:33 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=195.206.182.217 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=46276 DPT=20421 WINDOW=65535 RES=0x00 SYN URGP=0 Apr 26 08:07:33 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=195.206.182.217 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=46276 DPT=20421 WINDOW=65535 RES=0x00 SYN URGP=0 Apr 26 08:49:03 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=195.206.182.217 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=50431 DPT=45261 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1201 to 1215 of 1318 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 193.36.225.67

🇸🇪 171.25.158.68

🇨🇳 118.196.116.160

🇨🇳 115.197.177.92

🇻🇳 113.177.116.201

🇸🇪 83.251.78.184

🇺🇸 2a03:2880:15ff:45::

🇺🇸 2a03:2880:3ff:53::

🇺🇸 193.36.225.66

🇺🇸 193.19.109.145

🇳🇮 190.212.204.95

🇷🇺 178.207.10.91

🇨🇴 176.57.207.43

🇿🇦 169.239.182.214

🇮🇳 157.245.100.216

🇳🇱 151.242.88.162

🇦🇺 149.118.68.211

🇺🇸 104.168.74.62

🇳🇵 103.176.229.4

🇭🇰 45.196.236.141