JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.244.89.218

195.244.89.218 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 40%: ?

40%

ISP	Customer TV network
Usage Type	Fixed Line ISP
ASN	AS200444
Hostname(s)	218.c.ncanet.fi
Domain Name	glhnetsolutions.fi
Country	🇫🇮 Finland
City	Nykarleby, Ostrobothnia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.244.89.218

Whois 195.244.89.218

IP Abuse Reports for 195.244.89.218:

This IP address has been reported a total of 24 times from 17 distinct sources. 195.244.89.218 was first reported on March 9th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-06-22 07:07:24 (3 days ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 15:16:05 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 195.244.89.218 (218.c.ncanet.fi): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 195.244.89.218 (218.c.ncanet.fi): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 11:16:02.300638 2026] [security2:error] [pid 5862:tid 5862] [client 195.244.89.218:57828] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.arsenaultartistmanagement.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.arsenaultartistmanagement.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajK6MpVc-6qnk3dEvNDAqQAAAAU"], referer: https://www.arsenaultartistmanagement.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2026-06-09 09:13:26 (2 weeks ago)	195.244.89.218 (FI/Finland/218.c.ncanet.fi), 5 distributed imapd attacks on account [redacted]	Brute-Force
Anonymous	2026-05-28 16:30:24 (4 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇿🇦 maximonline.co.za	2026-05-25 11:22:26 (1 month ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇩🇪 swehosting.se	2026-05-22 07:06:23 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 195.244.89.218 (FI/Finland/218.c.ncanet.fi): 5 in the last 36 ... show more (smtpauth) Failed SMTP AUTH login from 195.244.89.218 (FI/Finland/218.c.ncanet.fi): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: May 22 08:34:39 webb postfix/smtpd[7554]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 22 08:34:47 webb postfix/smtpd[7554]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 22 08:34:56 webb postfix/smtpd[7554]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 22 09:06:05 webb postfix/smtpd[28152]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 22 09:06:20 webb postfix/smtpd[28152]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan
Anonymous	2026-05-14 16:19:55 (1 month ago)	2026-05-14T18:19:55.076215+02:00 mail.gwyll.eu postfix/submission/smtpd[2047319]: warning: 218.c.nca ... show more 2026-05-14T18:19:55.076215+02:00 mail.gwyll.eu postfix/submission/smtpd[2047319]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: authentication failure, [email protected] ... show less	Hacking Brute-Force
Anonymous	2026-05-12 04:30:16 (1 month ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2026-05-11 20:58:06 (1 month ago)	2026-05-11T22:58:05.258353+02:00 mail.gwyll.eu postfix/submission/smtpd[3500522]: warning: 218.c.nca ... show more 2026-05-11T22:58:05.258353+02:00 mail.gwyll.eu postfix/submission/smtpd[3500522]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: authentication failure, [email protected] ... show less	Hacking Brute-Force
🇨🇭 Spam Safe	2026-05-11 11:48:00 (1 month ago)	Origin of malicious phishing scam.	Email Spam Spoofing Phishing Hacking
🇩🇪 swehosting.se	2026-05-10 13:38:01 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 195.244.89.218 (FI/Finland/218.c.ncanet.fi): 5 in the last 36 ... show more (smtpauth) Failed SMTP AUTH login from 195.244.89.218 (FI/Finland/218.c.ncanet.fi): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: May 10 15:28:55 webb postfix/smtpd[9524]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 15:31:36 webb postfix/smtpd[9524]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 15:32:38 webb postfix/smtpd[23401]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 15:37:06 webb postfix/smtpd[9509]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 15:38:00 webb postfix/smtpd[23401]: warning: 218.c.ncanet.fi[195.244.89.218]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan
🇷🇴 iulianh	2026-05-10 10:20:19 (1 month ago)	25,465,587	Brute-Force SSH
🇬🇧 transcom	2026-05-08 01:00:04 (1 month ago)	Spam #2 to centralmail.co.uk (trap_type=efa_production, from=chataigne.co.jp)	Web Spam
🇷🇴 iulianh	2026-05-06 15:36:38 (1 month ago)	25,465,587	Brute-Force SSH
Anonymous	2026-05-02 06:41:05 (1 month ago)	BruteForce IMAP/POP3/SMTP	Brute-Force

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 217.148.142.94

🇬🇧 193.176.29.13

🇬🇧 188.240.59.57

🇬🇧 185.216.145.174

🇺🇸 154.219.121.169

🇮🇳 152.59.179.25

🇧🇷 152.32.200.213

🇮🇶 151.244.152.76

🇺🇸 107.150.98.168

🇵🇰 101.53.225.5

🇩🇪 69.5.169.71

🇺🇸 43.153.25.182

🇬🇧 35.203.210.93

🇧🇷 205.210.31.136

🇺🇸 205.210.31.25

🇩🇪 167.94.146.43

🇺🇸 154.194.50.148

🇺🇸 152.65.186.61

🇧🇪 146.148.10.82

🇺🇸 108.181.252.211