217.182.198.219
Classification: Malicious
217.182.198.219 is a malicious IP address in FR. 114 sightings from 6 threat sources (Malicious Host, Suspicious Host), last seen 2026-10-17. Seen in CO.
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in CO, across education networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN vpn inf | Maltiverse Threat Observatory | 2026-09-15 09:42:59 | 2026-10-17 09:45:20 | anonymization country_code:co industry:education-and-nonprofits malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-07-12 15:11:13 | 2025-01-29 02:14:46 | anomalous-activity | |
| Malicious Host | AbuseIPDB | 2024-08-09 13:46:40 | 2024-08-09 13:46:40 | malicious-activity | |
| SSH Attacker | Blocklist.de | 2020-11-19 01:51:51 | 2021-03-20 10:55:23 | malicious-activity | |
| SIP Attacker | Blocklist.de | 2020-11-16 08:09:21 | 2021-03-16 09:32:35 | malicious-activity | |
| Malicious Host | HoneyDB | 2020-11-24 00:00:00 | 2021-03-14 00:00:00 | malicious-activity | |
| Malicious Host | CIArmy | 2021-01-28 03:46:36 | 2021-02-11 18:26:28 | malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2020-12-26 07:55:31 | 2021-01-04 07:50:15 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2020-12-26 07:35:09 | 2021-01-04 07:34:38 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2020-12-15 05:39:41 | 2020-12-25 14:16:54 |
Tags
sip bruteforce bot attacker ssh apache ddos rfi login joomla wordpress port:9000 port:5959 port:2375 port:7000 port:3306 port:9001 port:2376 port:9020 port:9007 port:12321 port:10000 port:445Whois information
- AS name
- AS16276 OVH SAS
- AS registry
- ripencc
- AS date
- 2001-03-02 00:00:00
- AS CIDR
- 217.182.0.0/16
- CIDR
- 217.182.196.0/22
- Registrant
- Dedicated servers OVH
- Address
- Dudweiler Landstrasse 5 66123 Saarbrucken Deutschland
- Country
- FR — France 🇫🇷
- Contact email
- [email protected]
- First indexed
- 2020-11-16 08:09:21
- Last updated
- 2026-10-17 23:19:34
Malicious IPs in the same CIDR
217.182.198.219 217.182.253.249 217.182.205.236 217.182.71.160