143.105.17.248

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
63% Elevated
15 reports
11 reporters · latest 1 hour ago
ISP
SpaceX Services, Inc.
Usage Type
Fixed Line ISP
ASN
AS14593
Hostname(s)
customer.qrtomex1.isp.starlink.com
Domain Name
spacex.com
Country
🇲🇽 Mexico
City
Mexico City, Mexico City
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 11 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 9 🇦🇷 Argentina 1 🇧🇷 Brazil 1
Most common categories Port Scan 11 Hacking 5 Brute-Force 1 SSH 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇷 Bruno
Port Scanner: 143.105.17.248
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to MSSQL port 1433
Port Scan Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 1433) Source port: 34323 TTL: 245 Packet length: 40 TOS: 0x00 This report (for 143.105.17.248) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 RAP
2026-11-07 15:01:09 UTC Unauthorized activity to TCP port 1433. SQL
Port Scan
🇺🇸 cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port - corp
Port Scan Hacking
🇺🇸 sargetun
Honeypot: Auto-ban: 24 hour idle after honeypot interaction. Auto-reported from VPS honeypot.
Brute-Force SSH Hacking
🇺🇸 RAP
2026-11-07 11:57:22 UTC Unauthorized activity to TCP port 1433. SQL
Port Scan
🇺🇸 RAP
2026-11-07 08:41:01 UTC Unauthorized activity to TCP port 1433. SQL
Port Scan
🇺🇸 MPL
tcp/1433 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/1433
Port Scan
🇧🇷 Host One
T-Pot Honeypot alert: 1 malicious events (exploit_attempt) detected.
Hacking
🇺🇸 sargetun
Honeypot: MSSQL probe on port 1433 at 2026-11-06 12:51:48.766861. Automated report from VPS honeypot.
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 1433.
Port Scan Hacking
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
Exploited Host Bad Web Bot
🇺🇸 kosada.com
Web bot: DDoS
DDoS Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 203.76.182.120
🇧🇬 193.24.211.219
🇺🇸 136.109.246.45
🇳🇱 86.38.187.163
🇳🇱 77.239.124.173
🇺🇸 66.132.186.239
🇮🇳 49.207.182.187
🇺🇸 44.210.213.220
🇬🇧 188.240.59.17
🇲🇾 182.62.54.126
🇺🇸 172.71.23.151
🇧🇷 172.69.55.142
🇳🇱 45.148.10.152
🇺🇸 40.124.116.155
🇺🇸 40.77.167.15
🇺🇸 216.25.90.46
🇵🇰 172.69.244.188
🇻🇳 125.253.123.34
🇨🇳 116.255.146.141
🇹🇷 104.22.145.130
feedback