JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.148.144.211

118.148.144.211 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 59%: ?

59%

ISP	2degrees
Usage Type	Fixed Line ISP
ASN	AS9790
Domain Name	2degrees.nz
Country	🇳🇿 New Zealand
City	Auckland, Auckland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.148.144.211

Whois 118.148.144.211

IP Abuse Reports for 118.148.144.211:

This IP address has been reported a total of 21 times from 14 distinct sources. 118.148.144.211 was first reported on September 14th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 zerodaysystemde	2026-10-14 04:06:25 (3 days ago)	Port (22 tcp) Scanner - SSH - HoneyPot	Port Scan SSH
🇫🇷 security.rdmc.fr	2026-10-12 22:48:44 (4 days ago)	Port Scan Attack proto:TCP src:42186 dst:23	Port Scan
🇺🇸 RAP	2026-10-10 14:22:06 (6 days ago)	2026-10-10 14:22:06 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 Kejult	2026-10-08 23:04:51 (1 week ago)	Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target p ... show more Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target ports and 3 source port(s). Ports: 22/SSH, 23/Telnet. Sensors: Cowrie. show less	Port Scan
🇩🇪 xdee111	2026-10-03 21:52:47 (1 week ago)	Unauthorized SSH connection attempt (cowrie) on home server, banned by fail2ban	Brute-Force SSH
🇨🇦 Blinker73	2026-10-03 14:28:45 (1 week ago)	2026-10-03T10:28 kernel: OUT= SRC=118.148.144.211 LEN=60 TOS=0x00 PREC=0x00 TTL=237 ID=8213 DF ... show more 2026-10-03T10:28 kernel: OUT= SRC=118.148.144.211 LEN=60 TOS=0x00 PREC=0x00 TTL=237 ID=8213 DF PROTO=TCP SPT=58597 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-03T10:28 kernel: OUT= SRC=118.148.144.211 LEN=60 TOS=0x00 PREC=0x00 TTL=238 ID=31545 DF PROTO=TCP SPT=36637 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-03T10:28 kernel: OUT= SRC=118.148.144.211 LEN=60 TOS=0x00 PREC=0x00 TTL=237 ID=8214 DF PROTO=TCP SPT=58597 DPT=23 WINDOW=65535 RES=0x00 SYN URGP= show less	Port Scan
🇩🇪 Kejult	2026-10-02 17:04:42 (2 weeks ago)	Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 4 application-level events across 3 ... show more Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 4 application-level events across 3 source port(s). Sensor(s): Cowrie. show less	Port Scan
🇺🇸 MPL	2026-09-30 12:52:47 (2 weeks ago)	tcp ports: 23,22 (8 or more attempts)	Port Scan
🇵🇱 mkey	2026-09-27 07:00:01 (2 weeks ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS= ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS=22,23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-09-27 08:58:42 \| LAST=2026-09-27 08:58:42. Last seen 2026-09-27 08:58:42. show less	Port Scan
Anonymous	2026-09-27 01:27:29 (2 weeks ago)	Blocked by firewall on hugin [22/tcp] \| Rule: UFW \| SPT: 54435 \| TTL: 234 \| LEN: 60 \| TOS: 0x00 • Re ... show more Blocked by firewall on hugin [22/tcp] \| Rule: UFW \| SPT: 54435 \| TTL: 234 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH
🇩🇪 Kejult	2026-09-26 09:14:03 (2 weeks ago)	Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 3 application-level events across ... show more Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 3 application-level events across 3 source port(s). Sensor(s): Cowrie. show less	Port Scan
Anonymous	2026-09-25 05:10:10 (3 weeks ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇧🇷 noconex	2026-09-24 07:15:09 (3 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 118.148.14 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 118.148.144.211 show less	Port Scan Brute-Force SSH
🇧🇷 noconex	2026-09-22 11:41:34 (3 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 118.148.14 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 118.148.144.211 show less	Port Scan Brute-Force SSH
🇧🇷 noconex	2026-09-19 19:08:04 (3 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 118.148.14 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 118.148.144.211 show less	Port Scan Brute-Force SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 160.238.169.46

🇺🇸 138.197.35.59

🇮🇩 114.141.59.196

🇺🇸 74.82.62.138

🇫🇷 2001:41d0:33a:a00::400

🇸🇪 171.25.158.155

🇧🇷 130.49.114.54

🇨🇳 115.191.40.54

🇨🇳 113.66.230.6

🇺🇸 95.135.134.206

🇳🇱 91.92.42.200

🇺🇸 64.62.197.107

🇳🇵 45.117.153.121

🇷🇺 37.28.177.141

🇺🇸 147.185.132.55

🇨🇳 123.185.8.91

🇳🇱 109.160.32.124

🇺🇸 108.162.216.82

🇧🇩 103.122.44.55

🇺🇸 96.89.227.150