JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 81.19.216.97

81.19.216.97 was found in our database!

This IP was reported 1,268 times. Confidence of Abuse is 100%: ?

100%

ISP	Infrawatch Limited
Usage Type	Fixed Line ISP
ASN	AS25369
Hostname(s)	sw4-r6.8.6-evo.nl.as25369.net
Domain Name	infrawat.ch
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 81.19.216.97

Whois 81.19.216.97

IP Abuse Reports for 81.19.216.97:

This IP address has been reported a total of 1,268 times from 157 distinct sources. 81.19.216.97 was first reported on April 24th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-06-05 02:01:10 (1 hour ago)	Connection to port 7547 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:7547 ... show more Connection to port 7547 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:7547 User-Agent: Mozilla/5.0 (compatible; Infrawatch/1.0; +htt show less	Port Scan Hacking
🇺🇸 donarev419	2026-06-05 01:17:43 (2 hours ago)	Connection to port 9101 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:9101 ... show more Connection to port 9101 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:9101 User-Agent: Mozilla/5.0 (compatible; Infrawatch/1.0; +htt show less	Port Scan Hacking
🇺🇸 donarev419	2026-06-05 00:54:39 (2 hours ago)	Connection to port 3260 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:3260 ... show more Connection to port 3260 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:3260 User-Agent: Mozilla/5.0 (compatible; Infrawatch/1.0; +htt show less	Port Scan Hacking
🇦🇹 begou.dev	2026-06-04 19:52:38 (7 hours ago)	[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/25565	Port Scan
🇸🇬 drewf.ink	2026-06-04 11:15:49 (16 hours ago)	[11:15] Port scanning. Port(s) scanned: TCP/636	Port Scan
🇺🇸 donarev419	2026-06-04 06:48:27 (20 hours ago)	Connection to port 10713 with data transfer. Data preview: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8	Port Scan Hacking
🇧🇬 MazenHost	2026-06-04 03:58:32 (23 hours ago)	1780545511 - 06/04/2026 06:58:31 Host: 81.19.216.97/81.19.216.97 Port: 119 TCP Blocked ...	Port Scan
🇩🇪 D3RP4UL	2026-06-04 02:30:25 (1 day ago)	Unauthorized traffic on 135/epmapper	Port Scan
🇺🇸 donarev419	2026-06-04 01:44:30 (1 day ago)	Connection to port 873 with data transfer. Data preview: �	Port Scan Hacking
🇺🇸 donarev419	2026-06-04 00:28:59 (1 day ago)	Port scan detected on port 5400 (connection without data transfer)	Port Scan
🇩🇪 guldkage	2026-06-03 20:55:30 (1 day ago)	Unauthorized connection attempt detected from IP address 81.19.216.97 to port 22 (ger-01) [SSH]	Exploited Host
🇺🇸 rellim.com	2026-06-03 20:08:36 (1 day ago)	Jun 2 18:57:19 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:0 ... show more Jun 2 18:57:19 alice kernel: HACK IN=enp3s0 OUT=enp1s0 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=81.19.216.97 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=34095 DPT=28620 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 2 22:09:48 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=81.19.216.97 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=18037 DPT=41582 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 2 23:22:24 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=81.19.216.97 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 PROTO=TCP SPT=32863 DPT=57229 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-03 19:37:56 (1 day ago)	Honeypot detection: POP3 email brute-force authentication attempt on port 110. Severity: MEDIUM. Aar ... show more Honeypot detection: POP3 email brute-force authentication attempt on port 110. Severity: MEDIUM. Aaran.cloud show less	Brute-Force
🇫🇷 Guardian	2026-06-03 19:02:09 (1 day ago)	Unauthorized connection attempt to SMTP Relay	Spoofing Brute-Force
🇺🇸 xxkodedxx	2026-06-03 18:37:30 (1 day ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: NL / AS25369 Hydra Communications Ltd Active: 18:37:15 UTC Volume: 1 HTTP req Probed: / Status mix: 444×1 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 1268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.12.159

🇺🇸 66.132.186.242

🇩🇪 213.209.159.227

🇨🇳 180.76.243.197

🇧🇷 177.104.171.149

🇩🇪 130.12.181.104

🇺🇸 66.132.186.219

🇺🇸 64.62.156.24

🇷🇴 2.57.122.177

🇰🇷 218.151.18.223

🇬🇧 213.171.208.62

🇧🇷 200.155.66.2

🇮🇳 103.78.12.110

🇺🇸 64.62.197.77

🇨🇳 58.212.237.234

🇸🇬 47.82.15.248

🇻🇳 45.117.179.232

🇳🇱 45.87.249.200

🇻🇳 27.76.7.226

🇺🇸 18.217.103.175