Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
153.0.197.248 has been reported 38
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
2026-01-08 20:22:34,498 quad proftpd[3330605] quad (153.0.197.248[153.0.197.248]): USER root: no such user found from 153.0.197.248 [153.0.197.248] to 2.56.97.107:22
(sshd) Failed SSH login from 153.0.197.248 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 8 19:23:48 23887 sshd[18802]: Did not receive identification string from 153.0.197.248 port 51004
Jan 8 19:23:53 2 ...
show more(sshd) Failed SSH login from 153.0.197.248 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 8 19:23:48 23887 sshd[18802]: Did not receive identification string from 153.0.197.248 port 51004
Jan 8 19:23:53 23887 sshd[18803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 8 19:23:55 23887 sshd[18803]: Failed password for root from 153.0.197.248 port 51010 ssh2
Jan 8 19:23:57 23887 sshd[18805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 8 19:23:58 23887 sshd[18805]: Failed password for root from 153.0.197.248 port 51016 ssh2
show less
[AUTORAVALT][[08/01/2026 - 02:00:53 -03:00 UTC]
Attack from [ChinaUnicom Hostmaster]
[153.0.197.248]-[RANGE:153.0.0.0 - 153.0.255.255]
Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential b ...
show more[AUTORAVALT][[08/01/2026 - 02:00:53 -03:00 UTC]
Attack from [ChinaUnicom Hostmaster]
[153.0.197.248]-[RANGE:153.0.0.0 - 153.0.255.255]
Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc.
]
...
show less
(sshd) Failed SSH login from 153.0.197.248 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 7 16:36:09 15229 sshd[1065]: Did not receive identification string from 153.0.197.248 port 36912
Jan 7 16:36:11 15 ...
show more(sshd) Failed SSH login from 153.0.197.248 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 7 16:36:09 15229 sshd[1065]: Did not receive identification string from 153.0.197.248 port 36912
Jan 7 16:36:11 15229 sshd[1066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 7 16:36:13 15229 sshd[1066]: Failed password for root from 153.0.197.248 port 36914 ssh2
Jan 7 16:36:15 15229 sshd[1068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 7 16:36:18 15229 sshd[1068]: Failed password for root from 153.0.197.248 port 36916 ssh2
show less
(sshd) Failed SSH login from 153.0.197.248 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 7 10:34:52 20099 sshd[9827]: Did not receive identification string from 153.0.197.248 port 41242
Jan 7 10:34:57 20 ...
show more(sshd) Failed SSH login from 153.0.197.248 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 7 10:34:52 20099 sshd[9827]: Did not receive identification string from 153.0.197.248 port 41242
Jan 7 10:34:57 20099 sshd[9828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 7 10:34:59 20099 sshd[9828]: Failed password for root from 153.0.197.248 port 41246 ssh2
Jan 7 10:35:02 20099 sshd[9830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 7 10:35:03 20099 sshd[9830]: Failed password for root from 153.0.197.248 port 41250 ssh2
show less
(sshd) Failed SSH login from 153.0.197.248 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 7 02:53:07 17509 sshd[11821]: Did not receive identification string from 153.0.197.248 port 38818
Jan 7 02:53:09 1 ...
show more(sshd) Failed SSH login from 153.0.197.248 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 7 02:53:07 17509 sshd[11821]: Did not receive identification string from 153.0.197.248 port 38818
Jan 7 02:53:09 17509 sshd[11834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 7 02:53:11 17509 sshd[11834]: Failed password for root from 153.0.197.248 port 38820 ssh2
Jan 7 02:53:15 17509 sshd[11841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 7 02:53:18 17509 sshd[11841]: Failed password for root from 153.0.197.248 port 38828 ssh2
show less
Jan 6 14:41:36 ipht sshd[59473]: Failed password for root from 153.0.197.248 port 54432 ssh2
Jan 6 14:41:39 ipht sshd[59603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 6 14 ...
show moreJan 6 14:41:36 ipht sshd[59473]: Failed password for root from 153.0.197.248 port 54432 ssh2
Jan 6 14:41:39 ipht sshd[59603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 6 14:41:41 ipht sshd[59603]: Failed password for root from 153.0.197.248 port 54434 ssh2
...
show less
(sshd) Failed SSH login from 153.0.197.248 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 6 12:12:04 24499 sshd[754]: Did not receive identification string from 153.0.197.248 port 42806
Jan 6 12:12:06 244 ...
show more(sshd) Failed SSH login from 153.0.197.248 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jan 6 12:12:04 24499 sshd[754]: Did not receive identification string from 153.0.197.248 port 42806
Jan 6 12:12:06 24499 sshd[755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 6 12:12:08 24499 sshd[755]: Failed password for root from 153.0.197.248 port 42808 ssh2
Jan 6 12:12:11 24499 sshd[758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.0.197.248 user=root
Jan 6 12:12:13 24499 sshd[758]: Failed password for root from 153.0.197.248 port 42820 ssh2
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown