162.220.232.248
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Railway
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS400940
- Domain Name
- railway.com
- Country
- 🇺🇸 United States of America
- City
- Santa Clara, California
Abuse Reports
Total reports
58 from
44 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 phil2k |
|
Port Scan Brute-Force SSH | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-05 UTC.
|
Exploited Host | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇫🇮 dnsbd.tech |
nftables: Port scan (TCP:22) [srv2]
|
Port Scan Hacking | |
| 🇩🇪 anycast_ac |
Blocked by UFW on baremetal1 [3389/tcp] | SPT: 50248 | TTL: 241 | LEN: 44 | TOS: 0x00 • Reported by: FemboyHolding LTD
|
Port Scan | |
| 🇱🇹 NotACaptcha |
2026-11-04T23:55:34.719096+02:00 3d3l kernel: banned.IN=venet0 OUT= MAC= SRC=162.220.232.248 LEN=44 TTL=244 ID=29266 TCP DPT=5432 WINDOW=1025 SYN
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-04 21:37:46 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇩🇪 Da_tschek |
Port scanning
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-11-04 15:36:56 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇷🇺 genokrad |
Unauthorized connection try on TCP/22 (SSH)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/22 (2 or more attempts)
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 14 hits on ports [21, 22] (automated)
|
Port Scan Hacking Brute-Force SSH | |
| 🇸🇪 Peter Gabaldon |
Fail2Ban Triggered By 162.220.232.248
|
Port Scan SSH | |
| Anonymous |
PROTO=TCP DPT=23
|
Port Scan Hacking | |
| 🇰🇷 ian ian |
Unsolicited TCP SYN to closed port(s) 22,23 (3 attempt(s)) on a host that serves no such service; blocked by firewall.
|
SSH Brute-Force Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown