JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

168.197.156.248

Neutral Activity

Abuse confidence score ?

0% Low Risk

25 reports

14 reporters · latest 11 months ago

ISP	MAXXNET TELECOM
Usage Type	Unknown
ASN	Unknown
Domain Name	maxxnettelecom.com
Country	🇧🇷 Brazil
City	Belo Horizonte, Minas Gerais

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

168.197.156.248 has been reported 25 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 168.197.156.248

This IP address has been reported a total of 25 times from 14 distinct sources. 168.197.156.248 was first reported on October 5th 2022, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-10-18 15:37:12 (11 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit AI training data scraping to by ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit AI training data scraping to bypass robots.txt in thread-skip.asp show less	Bad Web Bot Exploited Host
🇳🇱 exxos	2025-09-03 17:03:01 (1 year ago)	Attacks with Bad user agents	Hacking
🇺🇸 anon333	2025-08-25 13:34:53 (1 year ago)	Hacker syslog review 1756128893	Hacking
🇩🇪 ISPLtd	2025-08-25 13:31:56 (1 year ago)	Aug 25 10:31:30 168.197.156.248 TCP SPT=80 DPT=12964 SYN Aug 25 10:31:36 168.197.156.248 TCP SPT=443 ... show more Aug 25 10:31:30 168.197.156.248 TCP SPT=80 DPT=12964 SYN Aug 25 10:31:36 168.197.156.248 TCP SPT=443 DPT=45666 SYN Aug 25 10:31:45 168.197.156.248 TCP SPT=80 DPT=35153 SYN ... show less	DDoS Attack
🇩🇪 ISPLtd	2025-08-14 12:26:58 (1 year ago)	Aug 14 09:22:26 168.197.156.248 TCP SPT=80 DPT=443 SYN Aug 14 09:23:42 168.197.156.248 TCP SPT=80 DP ... show more Aug 14 09:22:26 168.197.156.248 TCP SPT=80 DPT=443 SYN Aug 14 09:23:42 168.197.156.248 TCP SPT=80 DPT=443 SYN Aug 14 09:26:31 168.197.156.248 TCP SPT=80 DPT=80 SYN A ... show less	DDoS Attack
🇩🇪 ISPLtd	2025-08-14 02:19:02 (1 year ago)	Aug 13 23:18:28 168.197.156.248 TCP SPT=443 DPT=53222 SYN Aug 13 23:18:31 168.197.156.248 TCP SPT=80 ... show more Aug 13 23:18:28 168.197.156.248 TCP SPT=443 DPT=53222 SYN Aug 13 23:18:31 168.197.156.248 TCP SPT=80 DPT=16176 SYN Aug 13 23:18:32 168.197.156.248 TCP SPT=80 DPT=5175 SYN ... show less	DDoS Attack
🇩🇪 WebServ	2025-08-13 23:47:34 (1 year ago)	Blocked by ufw after 5 attempts in last 300s.	Brute-Force
🇩🇪 ISPLtd	2025-08-13 17:53:43 (1 year ago)	Aug 13 14:53:19 168.197.156.248 TCP SPT=443 DPT=14319 SYN Aug 13 14:53:26 168.197.156.248 TCP SPT=80 ... show more Aug 13 14:53:19 168.197.156.248 TCP SPT=443 DPT=14319 SYN Aug 13 14:53:26 168.197.156.248 TCP SPT=80 DPT=32503 SYN Aug 13 14:53:27 168.197.156.248 TCP SPT=443 DPT=37439 SYN ... show less	DDoS Attack
🇩🇪 ISPLtd	2025-08-13 13:05:32 (1 year ago)	Aug 13 10:04:41 168.197.156.248 TCP SPT=443 DPT=24543 SYN Aug 13 10:05:09 168.197.156.248 TCP SPT=44 ... show more Aug 13 10:04:41 168.197.156.248 TCP SPT=443 DPT=24543 SYN Aug 13 10:05:09 168.197.156.248 TCP SPT=443 DPT=58685 SYN Aug 13 10:05:20 168.197.156.248 TCP SPT=443 DPT=4313 SYN ... show less	DDoS Attack
🇩🇪 sthoyer.de	2025-08-13 09:46:18 (1 year ago)	Aug 13 11:46:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6: ... show more Aug 13 11:46:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.156.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=190 ID=15691 PROTO=TCP SPT=80 DPT=41515 WINDOW=14600 RES=0x00 SYN URGP=0 Aug 13 11:46:17 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.156.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=212 ID=17906 PROTO=TCP SPT=443 DPT=33866 WINDOW=14600 RES=0x00 SYN URGP=0 Aug 13 11:46:17 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.156.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=212 ID=17906 PROTO=TCP SPT=443 DPT=33866 WINDOW=14600 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 sthoyer.de	2025-08-13 08:46:10 (1 year ago)	Aug 13 10:45:49 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6: ... show more Aug 13 10:45:49 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.156.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=159 ID=51836 PROTO=TCP SPT=80 DPT=11115 WINDOW=8192 RES=0x00 SYN URGP=0 Aug 13 10:45:52 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.156.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=188 ID=52176 PROTO=TCP SPT=443 DPT=32370 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 13 10:45:52 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.156.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=188 ID=52176 PROTO=TCP SPT=443 DPT=32370 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 13 10:46:09 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.156.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=167 ID=54519 PROTO=TCP SPT=80 DPT=19748 WINDOW=14600 ... show less	Port Scan
🇩🇪 sthoyer.de	2025-08-13 07:52:01 (1 year ago)	Aug 13 09:51:25 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6: ... show more Aug 13 09:51:25 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.156.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=199 ID=29534 PROTO=TCP SPT=443 DPT=31291 WINDOW=8192 RES=0x00 SYN URGP=0 Aug 13 09:51:50 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.156.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=243 ID=32312 PROTO=TCP SPT=80 DPT=22946 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 13 09:51:52 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.156.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=178 ID=32644 PROTO=TCP SPT=80 DPT=24876 WINDOW=8192 RES=0x00 SYN URGP=0 Aug 13 09:51:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b6:ef:8f:08:00 SRC=168.197.156.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=171 ID=32821 PROTO=TCP SPT=80 DPT=27171 WINDOW=65535 RE ... show less	Port Scan
🇩🇪 ISPLtd	2025-08-13 07:02:34 (1 year ago)	Aug 13 04:01:35 168.197.156.248 TCP SPT=443 DPT=47310 SYN Aug 13 04:02:09 168.197.156.248 TCP SPT=44 ... show more Aug 13 04:01:35 168.197.156.248 TCP SPT=443 DPT=47310 SYN Aug 13 04:02:09 168.197.156.248 TCP SPT=443 DPT=24203 SYN Aug 13 04:02:10 168.197.156.248 TCP SPT=443 DPT=10191 SYN ... show less	DDoS Attack
🇨🇭 ScanThe.Net	2025-08-13 02:02:57 (1 year ago)	ID: 3906480505 \| PORT: 179 \| https://168-197-156-248.scanthe.net	Port Scan
🇩🇪 ISPLtd	2025-08-13 00:25:56 (1 year ago)	Aug 12 21:22:48 168.197.156.248 TCP SPT=443 DPT=18236 SYN Aug 12 21:22:50 168.197.156.248 TCP SPT=44 ... show more Aug 12 21:22:48 168.197.156.248 TCP SPT=443 DPT=18236 SYN Aug 12 21:22:50 168.197.156.248 TCP SPT=443 DPT=34247 SYN Aug 12 21:23:26 168.197.156.248 TCP SPT=80 DPT=55589 SYN ... show less	DDoS Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2600:3c15::2000:d7ff:fe8b:2a2b

🇳🇱 209.85.208.103

🇭🇰 199.45.154.126

🇳🇱 195.178.110.227

🇷🇺 178.178.222.55

🇹🇷 176.88.248.241

🇸🇪 176.10.197.168

🇯🇵 160.251.202.50

🇸🇬 114.119.130.27

🇳🇱 104.23.170.79

🇳🇱 104.23.170.78

🇳🇱 104.23.170.3

🇳🇱 104.23.170.2

🇨🇳 101.43.118.136

🇫🇷 91.231.89.157

🇷🇴 82.152.132.24

🇬🇧 78.153.140.149

🇺🇸 66.132.186.214

🇨🇦 45.194.92.105

🇯🇵 43.133.5.77