217.196.163.192

Classification: Malicious

217.196.163.192 is a malicious IP address in Ternopil, UA. 255 sightings from 4 threat sources (Port Scanner, SSH Attacker), last seen 2026-11-07.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.
  • IoT threat — Seen attacking IoT devices.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hacking AbuseIPDB 2026-08-14 08:40:59 2026-11-07 01:21:21 attacker malicious-activity
Port Scanner AbuseIPDB 2026-08-14 08:40:59 2026-11-06 23:45:00 attacker malicious-activity reconnaissance
Bruteforce AbuseIPDB 2026-08-14 12:00:06 2026-11-06 14:46:09 attacker malicious-activity
SSH Attacker AbuseIPDB 2026-08-14 08:40:59 2026-11-06 14:46:09 attacker malicious-activity
HTTP Attacker AbuseIPDB 2026-09-07 07:00:16 2026-11-06 00:03:25 attacker malicious-activity
SQL Injection AbuseIPDB 2026-11-06 00:03:25 2026-11-06 00:03:25 attacker malicious-activity
SSH Attacker Blocklist.de 2026-11-05 14:00:52 2026-11-05 14:00:52 attacker malicious-activity
Unauthorized scanning of hosts Blocklist.net.ua 2026-10-06 17:49:16 2026-11-03 17:00:36 attacker malicious-activity reconnaissance
HTTP Scrapper AbuseIPDB 2026-07-17 15:55:54 2026-11-03 07:08:20 attacker malicious-activity
IoT Attacker AbuseIPDB 2026-10-16 01:44:06 2026-10-16 01:44:06 iot malicious-activity
Malicious Host HoneyDB 2026-10-01 00:00:00 2026-10-01 00:00:00 attacker malicious-activity
DDoS Attacker AbuseIPDB 2026-07-17 15:55:54 2026-09-28 04:36:33 attacker malicious-activity

Tags

abuse ssh bruteforce bot

Whois information

AS name
AS16223 MAXNET TELECOM, LTD
Registrant
MAXNET TELECOM, LTD
City
Ternopil
Postal code
46000
Country
UA — Ukraine 🇺🇦
First indexed
2026-10-02 01:04:33
Last updated
2026-11-07 03:10:41