JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

217.64.148.96

Recent Activity

Abuse confidence score ?

38% Elevated

28 reports

22 reporters · latest 18 hours ago

ISP	OVPN Stockholm
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42675
Hostname(s)	217-64-148-96.pool.ovpn.com
Domain Name	ovpn.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 217.64.148.96

Export CSV

This IP address has been reported a total of 28 times from 22 distinct sources. 217.64.148.96 was first reported on February 13th 2021, and the most recent report was 18 hours ago. In the last 60 days, the top reporter locations were: France with 2 reports; United Kingdom of Great Britain and Northern Ireland with 2 reports; Czechia with 1 report. The most common categories in these recent reports were: Port Scan 6 times; Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 sthoyer.de	2026-10-03 17:32:01 (18 hours ago)	Oct 3 19:31:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Oct 3 19:31:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=217.64.148.96 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x20 TTL=241 ID=43562 PROTO=TCP SPT=9099 DPT=53264 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 3 19:31:57 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=217.64.148.96 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x20 TTL=241 ID=30103 PROTO=TCP SPT=9099 DPT=64579 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 3 19:31:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=217.64.148.96 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x20 TTL=241 ID=7343 PROTO=TCP SPT=9099 DPT=53250 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 3 19:31:59 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=217.64.148.96 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x20 TTL=241 ID=20275 PROTO=TCP SPT=9099 DPT=52918 WINDOW=1024 RES=0x ... show less	Port Scan
🇫🇷 Little Iguana	2026-10-03 17:31:58 (18 hours ago)	trying to access non-authorized port	Port Scan
🇳🇱 astijf	2026-10-03 13:37:55 (21 hours ago)	Port Scan detected from 217.64.148.96 (SE/Sweden/217-64-148-96.pool.ovpn.com). 5 hits in the last ... show more Port Scan detected from 217.64.148.96 (SE/Sweden/217-64-148-96.pool.ovpn.com). 5 hits in the last 427 seconds show less	Brute-Force Port Scan
🇬🇧 pearbright	2026-10-01 14:38:51 (2 days ago)	2026-10-01T14:38:39.666986+00:00 srv1791811 kernel: [8134604.035414] [UFW BLOCK] IN=eth0 OUT= MAC=64 ... show more 2026-10-01T14:38:39.666986+00:00 srv1791811 kernel: [8134604.035414] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=217.64.148.96 DST=76.13.255.190 LEN=40 TOS=0x08 PREC=0x20 TTL=239 ID=58242 PROTO=TCP SPT=9099 DPT=56750 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-01T14:38:40.568219+00:00 srv1791811 kernel: [8134604.936697] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=217.64.148.96 DST=76.13.255.190 LEN=40 TOS=0x08 PREC=0x20 TTL=239 ID=4114 PROTO=TCP SPT=9099 DPT=10998 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-01T14:38:40.586657+00:00 srv1791811 kernel: [8134604.955082] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=217.64.148.96 DST=76.13.255.190 LEN=40 TOS=0x08 PREC=0x20 TTL=239 ID=13152 PROTO=TCP SPT=9099 DPT=62150 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-01T14:38:40.665017+00:00 srv1791811 kernel: [8134605.033558] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=217.64.148.96 ... show less	Port Scan
🇨🇿 lp	2026-09-21 20:05:21 (1 week ago)	anomaly: tcp_src_session, 2501 > threshold 2500, repeats 6057 times	Port Scan
🇬🇧 kie	2026-08-28 13:05:59 (1 month ago)	28-08-2026:13:05:24UTC [Firewall] Unsolicited connection attempt to blocked port(s): port:TCP:37537 ... show more 28-08-2026:13:05:24UTC [Firewall] Unsolicited connection attempt to blocked port(s): port:TCP:37537 port:TCP:9999 (4 packet(s) blocked). show less	Port Scan
🇸🇪 Anonymous	2025-06-09 16:54:29 (1 year ago)	Drop from IP address 217.64.148.96 to tcp-port 13599	Port Scan
🇩🇪 kreativstrecke	2023-11-02 19:23:30 (2 years ago)	Nov 2 20:23:24 srv02 postfix/submission/smtpd[826817]: lost connection after CONNECT from 217-64-14 ... show more Nov 2 20:23:24 srv02 postfix/submission/smtpd[826817]: lost connection after CONNECT from 217-64-148-96.pool.ovpn.com[217.64.148.96] Nov 2 20:23:24 srv02 postfix/smtpd[826579]: lost connection after CONNECT from 217-64-148-96.pool.ovpn.com[217.64.148.96] Nov 2 20:23:30 srv02 postfix/smtps/smtpd[826819]: lost connection after CONNECT from 217-64-148-96.pool.ovpn.com[217.64.148.96] ... show less	Brute-Force
Anonymous	2023-08-17 13:00:12 (3 years ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
Anonymous	2023-07-21 07:54:50 (3 years ago)	(NGINX) Security rule triggered from 217.64.148.96 (SE/Sweden/217-64-148-96.pool.ovpn.com): 5 in the ... show more (NGINX) Security rule triggered from 217.64.148.96 (SE/Sweden/217-64-148-96.pool.ovpn.com): 5 in the last 3600 secs show less	Web App Attack
🇩🇪 ps-center	2023-02-03 03:10:43 (3 years ago)	MYH: Web Attack GET /app/etc/local.xml?q=5CLE6YC9	Web Spam Hacking Bad Web Bot Web App Attack
🇱🇺 Tha_14	2023-01-29 21:21:12 (3 years ago)	Incoming UDP Connection from 217.64.148.96 to port: 20473. Honeypot was triggered at 1/29/2023 23:21 ... show more Incoming UDP Connection from 217.64.148.96 to port: 20473. Honeypot was triggered at 1/29/2023 23:21:02. show less	Port Scan
🇨🇭 zynex	2023-01-19 05:30:31 (3 years ago)	URL Probing: /pub/web_system.php	Web App Attack
🇳🇱 Savvii	2023-01-18 13:02:12 (3 years ago)	20 attempts against mh_ha-misbehave-ban on flare	Brute-Force Bad Web Bot Web App Attack
🇩🇪 niceshops.com	2023-01-18 09:38:02 (3 years ago)	Web Attack ([18/Jan/2023:10:38:01.309] POST /330.php)	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇬 102.88.137.213

🇷🇺 93.178.72.108

🇹🇭 203.154.158.195

🇸🇬 159.65.128.76

🇳🇱 138.226.239.12

🇨🇳 123.235.245.126

🇵🇰 119.156.28.155

🇸🇪 85.24.246.216

🇺🇸 34.59.74.157

🇵🇭 27.110.166.67

🇮🇶 212.237.119.4

🇬🇧 206.189.126.255

🇺🇸 162.216.149.15

🇺🇸 136.143.241.189

🇯🇵 124.155.125.131

🇨🇳 124.90.55.108

🇨🇳 36.142.172.50

🇯🇵 8.216.13.106

🇷🇴 2.57.122.76

🇺🇸 205.210.31.50