195.158.4.215
Classification: Malicious
195.158.4.215 is a malicious IP address. Reported by 4 threat sources, last seen 2026-08-28. Network: AS8193 UZTELECOM.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| SSH Attacker | Blocklist.net.ua | 2025-07-23 13:31:22 | 2026-08-28 17:00:30 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-01-31 12:34:20 | 2026-04-09 02:38:34 | anomalous-activity | |
| Malicious Host | AbuseIPDB | 2024-12-22 23:01:04 | 2026-03-25 02:39:09 | compromised malicious-activity | |
| Bruteforce | AbuseIPDB | 2024-12-22 12:32:08 | 2026-03-02 01:53:57 | malicious-activity | |
| SSH Attacker | AbuseIPDB | 2024-12-22 12:32:08 | 2026-03-02 01:53:57 | malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2024-12-28 05:07:25 | 2026-02-17 23:32:03 | malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2026-02-05 05:06:13 | 2026-02-17 05:02:34 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2026-02-17 03:02:26 | 2026-02-17 03:02:26 | malicious-activity | |
| SSH Attacker | Blocklist.de | 2024-12-23 11:18:54 | 2026-02-16 12:23:15 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2024-12-22 15:14:15 | 2026-02-15 18:18:41 | anomalous-activity | |
| Hacking | AbuseIPDB | 2024-12-22 15:14:15 | 2026-02-15 02:34:04 | malicious-activity | |
| FTP Attacker | AbuseIPDB | 2024-12-31 05:07:15 | 2026-02-14 01:31:22 | malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2024-12-30 22:47:30 | 2026-02-12 02:40:18 | anomalous-activity | |
| Malicious Host | HoneyDB | 2026-02-03 00:00:00 | 2026-02-11 00:00:00 | malicious-activity | |
| Phishing | AbuseIPDB | 2025-02-06 21:29:53 | 2026-02-10 11:51:56 | malicious-activity | |
| Mail Spammer | AbuseIPDB | 2024-12-30 22:47:30 | 2026-02-10 11:51:56 | malicious-activity | |
| IMAP Attacker | AbuseIPDB | 2025-01-07 04:34:58 | 2026-02-10 11:51:56 | malicious-activity | |
| SQL Injection | AbuseIPDB | 2024-12-22 15:14:15 | 2026-02-05 11:29:58 | malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-02-04 03:17:00 | 2026-02-04 03:17:00 | malicious-activity | |
| Brute force passwords using SSH on server Dev.ASedinkin | Blocklist.net.ua | 2025-01-26 20:19:17 | 2025-07-22 13:40:09 | malicious-activity | |
| SIP Attacker | Blocklist.de | 2025-04-17 15:15:40 | 2025-04-17 15:15:40 | malicious-activity | |
| IoT Attacker | AbuseIPDB | 2024-12-30 00:01:15 | 2025-04-02 16:50:09 | malicious-activity | |
| DDoS attack | AbuseIPDB | 2024-12-30 22:47:30 | 2025-03-30 06:19:41 | malicious-activity | |
| DNS Compromise | AbuseIPDB | 2025-01-07 15:48:49 | 2025-02-17 00:50:26 | compromised | |
| DNS Poisoning | AbuseIPDB | 2025-01-07 15:48:49 | 2025-02-17 00:50:26 | compromised | |
| Known Attacker | AbuseIPDB | 2024-12-30 22:47:30 | 2025-02-17 00:50:26 | malicious-activity | |
| SIP Attacker | AbuseIPDB | 2025-02-06 21:29:53 | 2025-02-07 19:31:10 | malicious-activity | |
| Proxy | AbuseIPDB | 2025-02-06 21:29:53 | 2025-02-07 19:31:10 | anonymization | |
| VPN | AbuseIPDB | 2025-02-06 21:29:53 | 2025-02-07 19:31:10 | anonymization |
Tags
ssh bruteforce bot abuse sip attacker login joomla wordpress apache ddos rfiWhois information
- AS name
- AS8193 UZTELECOM
- AS registry
- ripencc
- AS date
- 1996-08-29 00:00:00
- AS CIDR
- 195.158.0.0/19
- Registrant
- UZTELECOM
- City
- Tashkent
- Postal code
- 100000
- Country
- UZ — Uzbekistan 🇺🇿
- First indexed
- 2024-12-23 00:47:21
- Last updated
- 2026-08-28 17:00:30
Malicious IPs in the same CIDR
195.158.16.60 195.158.26.59 195.158.8.123 195.158.16.151 195.158.14.232 195.158.24.137 195.158.4.215 195.158.4.210 195.158.9.163