This IP address has been reported a total of
382
times from
120 distinct
sources.
18.97.19.248 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection/event(s), 2779 payload byte(s) total, maximum payload 1560 byte(s). Target port(s): 2096.
show less
Honeypot Finding: active TCP application payload captured by Honeytrap; 7 payload-bearing connection ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 7 payload-bearing connection/event(s), 4339 payload byte(s) total, maximum payload 1560 byte(s). Target port(s): 50091.
show less
Hosting panel login brute-force against Resco Telecom PBX. 2026-10-19 17:09:22 UTC PLESK x49 port 84 ...
show moreHosting panel login brute-force against Resco Telecom PBX. 2026-10-19 17:09:22 UTC PLESK x49 port 8443
show less
Honeypot Finding: active TCP application payload captured by Honeytrap; 4 payload-bearing connection ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 4 payload-bearing connection/event(s), 815 payload byte(s) total, maximum payload 517 byte(s). Target port(s): 30002.
show less
Auto-blocked by Seczar SecureOps — Database Service Brute Force (8 events in 5min) at 2026-10-19 04: ...
show moreAuto-blocked by Seczar SecureOps — Database Service Brute Force (8 events in 5min) at 2026-10-19 04:06
show less
Connection to port 9999 with data transfer.
Data preview: GET / HTTP/1.1
Host: 198.23.188.201:9999
...
show moreConnection to port 9999 with data transfer.
Data preview: GET / HTTP/1.1
Host: 198.23.188.201:9999
User-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKi
show less
Honeypot Finding: active TCP application payload captured by Honeytrap; 14 payload-bearing connectio ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 14 payload-bearing connection/event(s), 10771 payload byte(s) total, maximum payload 1560 byte(s). Target port(s): 8081.
show less
Honeypot Finding: active TCP application payload captured by Honeytrap; 4 payload-bearing connection ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 4 payload-bearing connection/event(s), 778 payload byte(s) total, maximum payload 517 byte(s). Target port(s): 2222.
show less
Honeypot Finding: repeated TCP service probing on TCP/8012 (service); 6 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/8012 (service); 6 application-level events across 6 source port(s). Sensor(s): Honeytrap.
show less
Honeypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 6 payload-bearing connection/event(s), 2779 payload byte(s) total, maximum payload 1560 byte(s). Target port(s): 9000.
show less
Honeypot Finding: active TCP application payload captured by Honeytrap; 7 payload-bearing connection ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 7 payload-bearing connection/event(s), 1743 payload byte(s) total, maximum payload 517 byte(s). Target port(s): 9201.
show less
Port Scan
Hacking
Showing 1 to
15
of 382 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩