JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.3.220.99

195.3.220.99 was found in our database!

This IP was reported 263 times. Confidence of Abuse is 100%: ?

100%

ISP	MEVSPACE sp. z o.o.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201814
Domain Name	mevspace.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.3.220.99

Whois 195.3.220.99

IP Abuse Reports for 195.3.220.99:

This IP address has been reported a total of 263 times from 119 distinct sources. 195.3.220.99 was first reported on April 18th 2026, and the most recent report was 42 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-15 00:55:17 (42 minutes ago)	Honeypot hit: Suspicious payload (possible command injection); 8888 [1] TCP	Hacking
🇩🇪 dispaisyenterprises	2026-06-14 23:03:48 (2 hours ago)	Honeypot [fra-de-honeypot]: Suspicious payload (possible command injection); 8888 [1] TCP Reported b ... show more Honeypot [fra-de-honeypot]: Suspicious payload (possible command injection); 8888 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking
🇨🇭 SOC [GOLINE SA]	2026-06-14 19:27:41 (6 hours ago)	[RoutePulse \| 2026-06-14T19:27:41Z] ATTACK: Threat IP Active SOURCE: 195.3.220.99 · AS201814 MEVSPAC ... show more [RoutePulse \| 2026-06-14T19:27:41Z] ATTACK: Threat IP Active SOURCE: 195.3.220.99 · AS201814 MEVSPACE sp. z o.o. · Poland EVIDENCE: severity=critical · 196 flows · 82 KB INTEL: AbuseIPDB 100% (255 reports) \| feeds: FortiAnalyzer Threat Intel (13) \| RoutePulse score 75/100 24H PERSISTENCE: 25 events (SIEM Firewall Scan×24, Threat IP Active×1) MITRE: T1071 Application Layer Protocol DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Hacking Exploited Host
Anonymous	2026-06-14 19:13:28 (6 hours ago)	Honeypot hit: Suspicious payload (possible command injection); 8888 [1] TCP Reported by: https://git ... show more Honeypot hit: Suspicious payload (possible command injection); 8888 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking
🇷🇺 SeMPaI	2026-06-14 17:57:05 (7 hours ago)	[[hidden by err]] Port scan detected from PL from 195.3.220.99 to ports 8888	Port Scan
🇺🇸 MPL	2026-06-14 17:56:41 (7 hours ago)	tcp/8888 (2 or more attempts)	Port Scan
🇩🇪 iNetWorker	2026-06-14 17:51:09 (7 hours ago)	firewall-block, port(s): 8888/tcp	Port Scan
🇦🇹 Pingger Shikkoken	2026-06-14 17:49:13 (7 hours ago)	2026-06-14T17:49:13+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-06-14T17:49:13+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=195.3.220.99 DST=152.53.50.28 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=58655 PROTO=TCP SPT=43878 DPT=8888 WINDOW=1025 RES=0x00 SYN URGP=0 show less	Hacking
Anonymous	2026-06-14 17:41:20 (7 hours ago)	Jun 14 13:41:20 localhost kernel: [109804172.599176] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 14 13:41:20 localhost kernel: [109804172.599176] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=195.3.220.99 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=39844 PROTO=TCP SPT=43878 DPT=8888 WINDOW=1025 RES=0x00 SYN URGP=0 Jun 14 13:41:20 localhost kernel: [109804172.599202] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=195.3.220.99 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=39844 PROTO=TCP SPT=43878 DPT=8888 SEQ=3522419042 ACK=0 WINDOW=1025 RES=0x00 SYN URGP=0 OPT (020405B4) show less	Port Scan
🇩🇪 David Ferneding	2026-06-14 17:36:44 (8 hours ago)	Blocked by UFW (TCP on 8888) Source port: 43878 TTL: 247 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8888) Source port: 43878 TTL: 247 Packet length: 44 TOS: 0x08 This report (for 195.3.220.99) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-14 17:25:42 (8 hours ago)	Blocked by UFW (TCP on 8888) Source port: 43862 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8888) Source port: 43862 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 195.3.220.99) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-06-14 17:11:08 (8 hours ago)	Blocked by UFW on ns03 [8888/tcp] Source port: 43878 TTL: 247 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on ns03 [8888/tcp] Source port: 43878 TTL: 247 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-14 16:55:25 (8 hours ago)	2026-06-14T17:55:24.595300+01:00 vps kernel: [43196281.149525] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-14T17:55:24.595300+01:00 vps kernel: [43196281.149525] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=195.3.220.99 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x40 TTL=241 ID=32676 PROTO=TCP SPT=43862 DPT=8888 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
Anonymous	2026-06-14 16:53:38 (8 hours ago)	Unauthorized connection	Port Scan Hacking
🇳🇱 StopAbuse	2026-06-14 16:49:35 (8 hours ago)	tcp/8888	Port Scan

Showing 1 to 15 of 263 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:d3c:662:a400:9162:f236:720c:68d5

🇰🇷 221.161.235.168

🇧🇷 179.51.153.37

🇨🇳 125.88.225.11

🇬🇧 35.203.211.153

🇮🇳 34.131.93.91

🇧🇪 34.76.60.10

🇺🇸 20.119.41.192

🇺🇸 20.25.10.65

🇫🇷 157.173.100.92

🇯🇵 156.227.232.198

🇭🇰 118.193.47.155

🇸🇬 103.250.11.63

🇩🇪 69.5.169.190

🇸🇬 43.128.120.247

🇺🇸 40.124.169.176

🇮🇳 35.200.215.156

🇺🇸 216.73.161.155

🇧🇷 205.210.31.199

🇸🇬 188.166.246.68