JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 205.196.19.170

205.196.19.170 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 67%: ?

67%

ISP	Performive LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS11504
Hostname(s)	205.196.19.170.icertified.net
Domain Name	performive.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 205.196.19.170

Whois 205.196.19.170

IP Abuse Reports for 205.196.19.170:

This IP address has been reported a total of 19 times from 15 distinct sources. 205.196.19.170 was first reported on May 25th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 soc-yk	2026-06-16 18:31:12 (1 day ago)	Type: suspicious_network_activity Risk: 73 Events: 117 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 73 Events: 117 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇺🇸 arc21	2026-06-15 22:40:11 (2 days ago)	2026-06-15T22:40:11.051351+00:00 ENGL-NYC-5 kernel: [3502205.505796] [UFW BLOCK] IN=br0 OUT= PHYSIN= ... show more 2026-06-15T22:40:11.051351+00:00 ENGL-NYC-5 kernel: [3502205.505796] [UFW BLOCK] IN=br0 OUT= PHYSIN=enp5s0 MAC=c6:28:62:bb:6a:37:44:4c:a8:25:16:b1:08:00 SRC=205.196.19.170 DST=130.12.156.66 LEN=40 TOS=0x00 PREC=0x60 TTL=54 ID=0 DF PROTO=TCP SPT=80 DPT=51685 WINDOW=0 RES=0x00 RST URGP=0 2026-06-15T22:40:11.051442+00:00 ENGL-NYC-5 kernel: [3502205.506345] [UFW BLOCK] IN=br0 OUT= PHYSIN=enp5s0 MAC=c6:28:62:bb:6a:37:44:4c:a8:25:16:b1:08:00 SRC=205.196.19.170 DST=130.12.156.66 LEN=40 TOS=0x00 PREC=0x60 TTL=54 ID=0 DF PROTO=TCP SPT=80 DPT=6143 WINDOW=0 RES=0x00 RST URGP=0 2026-06-15T22:40:11.054334+00:00 ENGL-NYC-5 kernel: [3502205.508674] [UFW BLOCK] IN=br0 OUT= PHYSIN=enp5s0 MAC=c6:28:62:bb:6a:37:44:4c:a8:25:16:b1:08:00 SRC=205.196.19.170 DST=130.12.156.66 LEN=526 TOS=0x02 PREC=0xE0 TTL=54 ID=57333 PROTO=ICMP TYPE=0 CODE=0 ID=15976 SEQ=38453 ... show less	Port Scan
🇩🇪 Selckie	2026-06-14 19:55:45 (3 days ago)	fail2ban: NGINX unusual impact	Web App Attack
🇩🇪 tackyou	2026-06-14 15:49:59 (3 days ago)	DNS flooding on our DNS server: 320x v2z.ru in 300s. Banned by Adguard Shield 🔗 https://tnvs.de/as	DDoS Attack
🇳🇱 Yachiyo Runami	2026-06-12 10:59:36 (5 days ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 240 \| Len: 40B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 240 \| Len: 40B \| Win: 64240(1) \| rDNS: 205.196.19.170.icertified.net \| F2B/ufw-honeypot@2026-06-12T10:59:36Z show less	Port Scan Hacking
🇹🇷 SeczarSecureOps	2026-06-12 07:17:40 (5 days ago)	Auto-blocked by Seczar SecureOps — DNS Flood / Tunneling Suspected (568 events in 5min) at 2026-06-1 ... show more Auto-blocked by Seczar SecureOps — DNS Flood / Tunneling Suspected (568 events in 5min) at 2026-06-12 07:17 show less	Web App Attack
🇫🇷 ISPLtd	2026-06-11 20:34:28 (6 days ago)	Jun 11 22:34:02 205.196.19.170 TCP SPT=80 DPT=443 SYN Jun 11 22:34:02 205.196.19.170 TCP SPT=80 DPT= ... show more Jun 11 22:34:02 205.196.19.170 TCP SPT=80 DPT=443 SYN Jun 11 22:34:02 205.196.19.170 TCP SPT=80 DPT=443 SYN Jun 11 22:34:03 205.196.19.170 TCP SPT=80 DPT=443 SYN ... show less	DDoS Attack
🇦🇹 SchiWaGoA	2026-06-05 21:47:44 (1 week ago)	DNS flooding on our DNS server: 16x sony.com in 25s. Banned by Adguard Shield 🔗 https://git.technive ... show more DNS flooding on our DNS server: 16x sony.com in 25s. Banned by Adguard Shield 🔗 https://git.techniverse.net/scriptos/adguard-shield.git show less	DDoS Attack
🇺🇸 wteiken	2026-06-01 06:02:55 (2 weeks ago)	2026-06-01T02:02:46.297134-04:00 rocinante.teiken.net kernel: [223342.423450] syn_limit:IN=ens5 OUT= ... show more 2026-06-01T02:02:46.297134-04:00 rocinante.teiken.net kernel: [223342.423450] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=205.196.19.170 DST=192.168.16.119 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=7639 PROTO=TCP SPT=10343 DPT=80 WINDOW=53270 RES=0x00 SYN URGP=0 2026-06-01T02:02:48.378322-04:00 rocinante.teiken.net kernel: [223344.504636] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=205.196.19.170 DST=192.168.16.119 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=19231 PROTO=TCP SPT=12458 DPT=80 WINDOW=53270 RES=0x00 SYN URGP=0 2026-06-01T02:02:49.466078-04:00 rocinante.teiken.net kernel: [223345.592364] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=205.196.19.170 DST=192.168.16.119 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=50235 PROTO=TCP SPT=14692 DPT=80 WINDOW=53270 RES=0x00 SYN URGP=0 2026-06-01T02:02:50.531917-04:00 rocinante.teiken.net kernel: [223346.658214] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05 ... show less	Port Scan
🇮🇪 RoboSOC	2026-05-31 21:54:12 (2 weeks ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 205.196.19.170.icertified.net.	Port Scan
Anonymous	2026-05-30 23:52:03 (2 weeks ago)	Port Scan detected from 205.196.19.170 (US/United States/205.196.19.170.icertified.net). 5 hits in ... show more Port Scan detected from 205.196.19.170 (US/United States/205.196.19.170.icertified.net). 5 hits in the last 25 seconds show less	Brute-Force Port Scan
🇩🇪 Tamsweb	2026-05-30 20:38:00 (2 weeks ago)	Unauthorized connection attempt or scan from 205.196.19.170 on port 22 ...	Port Scan
🇺🇸 wteiken	2026-05-29 11:59:59 (2 weeks ago)	2026-05-29T07:59:56.296140-04:00 rocinante.teiken.net kernel: [76781.836572] syn_limit:IN=ens5 OUT= ... show more 2026-05-29T07:59:56.296140-04:00 rocinante.teiken.net kernel: [76781.836572] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=205.196.19.170 DST=192.168.16.119 LEN=64 TOS=0x08 PREC=0x20 TTL=62 ID=59765 DF PROTO=TCP SPT=14023 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-05-29T07:59:56.745794-04:00 rocinante.teiken.net kernel: [76782.286229] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=205.196.19.170 DST=192.168.16.119 LEN=64 TOS=0x00 PREC=0x00 TTL=65 ID=4362 DF PROTO=TCP SPT=2768 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-29T07:59:57.645241-04:00 rocinante.teiken.net kernel: [76783.185674] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=205.196.19.170 DST=192.168.16.119 LEN=64 TOS=0x08 PREC=0x40 TTL=63 ID=3366 DF PROTO=TCP SPT=3202 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-05-29T07:59:58.096037-04:00 rocinante.teiken.net kernel: [76783.636469] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05: ... show less	Port Scan
🇺🇸 sumnone	2026-05-26 21:48:09 (3 weeks ago)	Port probing on unauthorized port 34923	Port Scan Hacking Exploited Host
Anonymous	2026-05-26 13:22:48 (3 weeks ago)	Port Scan detected from 205.196.19.170 (US/United States/205.196.19.170.icertified.net). 5 hits in ... show more Port Scan detected from 205.196.19.170 (US/United States/205.196.19.170.icertified.net). 5 hits in the last 5 seconds show less	Brute-Force Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.179

🇺🇸 173.249.253.101

🇺🇸 100.23.75.120

🇺🇸 66.132.195.19

🇨🇭 20.250.43.245

🇹🇼 198.235.24.120

🇹🇼 198.235.24.106

🇵🇾 181.123.62.210

🇺🇸 173.249.252.61

🇺🇸 172.173.200.62

🇺🇸 172.93.106.153

🇩🇪 167.94.146.36

🇫🇷 158.220.108.215

🇲🇾 118.100.245.87

🇮🇩 103.172.20.218

🇧🇩 103.143.254.60

🇫🇷 91.231.89.152

🇺🇸 91.230.168.247

🇧🇬 79.124.62.178

🇲🇾 47.250.114.154