JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 81.19.216.106

81.19.216.106 was found in our database!

This IP was reported 1,183 times. Confidence of Abuse is 100%: ?

100%

ISP	Infrawatch Limited
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	106.216.19.81.baremetal.zare.com
Domain Name	infrawat.ch
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 81.19.216.106

Whois 81.19.216.106

IP Abuse Reports for 81.19.216.106:

This IP address has been reported a total of 1,183 times from 148 distinct sources. 81.19.216.106 was first reported on April 24th 2026, and the most recent report was 20 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-04-25 11:55:09 (1 month ago)	Blocked by UFW (TCP on 27559) Source port: 62517 TTL: 50 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 27559) Source port: 62517 TTL: 50 Packet length: 40 TOS: 0x08 This report (for 81.19.216.106) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-04-25 11:48:02 (1 month ago)	tcp port scan (5 or more attempts)	Port Scan
🇺🇸 MPL	2026-04-25 11:15:56 (1 month ago)	tcp ports: 3306,120 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-04-25 10:42:17 (1 month ago)	tcp/30677 (4 or more attempts)	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-04-25 09:58:59 (1 month ago)	Honeypot hit: SSH handshake/banner (42 bytes of payload); 7060 [1] TCP	Brute-Force SSH
🇮🇳 Mr.Singh	2026-04-25 09:30:51 (1 month ago)	NFT blocked 81.19.216.106 on 25-Apr-2026..	Port Scan Brute-Force
🇺🇸 xmission.com	2026-04-25 09:16:56 (1 month ago)	Blocked by UFW (TCP on 52115) Source port: 23918 TTL: 50 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 52115) Source port: 23918 TTL: 50 Packet length: 40 TOS: 0x08 This report (for 81.19.216.106) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-04-25 09:07:04 (1 month ago)	2026-04-25T12:07:04.108813+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-04-25T12:07:04.108813+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=81.19.216.106 DST=192.168.0.102 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=0 PROTO=TCP SPT=29650 DPT=50318 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-04-25 08:47:06 (1 month ago)	tcp port scan (12 or more attempts)	Port Scan
🇺🇸 rellim.com	2026-04-25 08:18:14 (1 month ago)	Apr 24 19:48:29 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:0 ... show more Apr 24 19:48:29 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=81.19.216.106 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=38385 DPT=23113 WINDOW=65535 RES=0x00 SYN URGP=0 Apr 24 19:48:29 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=81.19.216.106 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=38385 DPT=23113 WINDOW=65535 RES=0x00 SYN URGP=0 Apr 25 01:18:14 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=81.19.216.106 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=60986 DPT=17477 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇹 centurion	2026-04-25 08:14:28 (1 month ago)	Unauthorized attempt on siem [52463/tcp] Source port: 22097 TTL: 52 Packet length: 40 TOS: 0x00 http ... show more Unauthorized attempt on siem [52463/tcp] Source port: 22097 TTL: 52 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 LiftUp Hosting	2026-04-25 08:04:01 (1 month ago)	Honeypot hit: Empty payload (likely service probe); 2002 [1] TCP	Port Scan
🇺🇸 MPL	2026-04-25 07:49:46 (1 month ago)	tcp port scan (25 or more attempts)	Port Scan
🇺🇸 MPL	2026-04-25 07:07:39 (1 month ago)	tcp ports: 64047,60000 (5 or more attempts)	Port Scan
🇺🇸 donarev419	2026-04-25 06:52:59 (1 month ago)	Connection to port 49 with data transfer. Data preview: �	Port Scan Hacking

Showing 1141 to 1155 of 1183 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2401:fa00:1a:200:b3ab:214:ad:9b4f

🇳🇱 195.178.110.31

🇮🇶 185.206.124.55

🇺🇸 62.197.145.51

🇨🇳 58.56.200.238

🇩🇪 2001:41d0:700:3157::

🇸🇬 206.189.158.131

🇸🇬 178.128.100.100

🇺🇸 162.216.150.30

🇺🇸 157.245.169.157

🇻🇳 116.118.44.131

🇳🇱 77.238.230.6

🇨🇦 34.19.252.159

🇸🇬 8.219.122.226

🇺🇦 178.158.207.122

🇺🇸 152.32.236.157

🇸🇬 149.88.106.168

🇺🇸 147.185.132.214

🇫🇮 135.181.60.164

🇺🇸 135.119.97.34