This IP address has been reported a total of
13
times from
11 distinct
sources.
178.238.227.252 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 6
reports;
France
with 5
reports;
Canada
with 1
report.
The most common categories in these recent reports were:
Port Scan
11
times;
Web App Attack
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unauthorized attempt on (TCP on port 3000).
Source port: 37598
TTL: 55
Packet length: 60
Timestamp: ...
show moreUnauthorized attempt on (TCP on port 3000).
Source port: 37598
TTL: 55
Packet length: 60
Timestamp: 2026-10-12 00:03:03
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=178.238.227.252; proto=TCP; source_port=52148; target_port=3000
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=178.238.227.252; proto=TCP; source_port=58236; target_port=3000; flags=SYN
show less
Blocked by UFW [3000/tcp]
Source port: 50468
TTL: 46
Packet length: 60
TOS: 0x00
This report was ge ...
show moreBlocked by UFW [3000/tcp]
Source port: 50468
TTL: 46
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=178.238.227.252; proto=TCP; source_port=39290; target_port=3000; flags=SYN
show less
Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events a ...
show moreHoneypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events across 95 source port(s). Sensor(s): Honeyaml.
show less
Port Scan
Showing 1 to
13
of 13 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
