JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.213.154.248

Recent Activity

Abuse Confidence Score

82% Critical

111 reports

57 reporters · latest 3 days ago

ISP: 31173 Services AB infrastructure in Gothenburg, SE.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS39351
Domain Name: 31173.se
Country: 🇸🇪 Sweden
City: Gothenburg, Vastra Gotaland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

111 from 57 distinct reporters

First reported

September 17th 2023

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 8 🇨🇿 Czechia 3 🇺🇸 United States of America 3

Most common categories Brute-Force 17 SSH 11 Web App Attack 5 Hacking 5 Port Scan 4

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hugopvigo	2026-11-08 21:54:49 UTC · (3 days ago)	"2026-11-08 21:54:48+00:00 185.213.154.248 IP con score alto (87) detectada en el log."	Brute-Force SSH
🇩🇪 Lovinoes	2026-11-06 13:09:30 UTC · (6 days ago)	2026-11-06T14:09:22.482150+01:00 lovinoes.de sshd-session[2729578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.213.154.248 2026-11-06T14:09:25.045034+01:00 lovinoes.de sshd-session[2729578]: Failed pas ... show more 2026-11-06T14:09:22.482150+01:00 lovinoes.de sshd-session[2729578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.213.154.248 2026-11-06T14:09:25.045034+01:00 lovinoes.de sshd-session[2729578]: Failed password for invalid user alpine from 185.213.154.248 port 40448 ssh2 2026-11-06T14:09:29.115070+01:00 lovinoes.de sshd-session[2729578]: Failed password for invalid user alpine from 185.213.154.248 port 40448 ssh2 ... show less	Port Scan Brute-Force SSH
Anonymous	2026-11-06 12:05:11 UTC · (6 days ago)	2026-11-06T23:05:06.235311+11:00 phosphor sshd-session[377564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.213.154.248 2026-11-06T23:05:08.028810+11:00 phosphor sshd-session[377564]: Failed password fo ... show more 2026-11-06T23:05:06.235311+11:00 phosphor sshd-session[377564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.213.154.248 2026-11-06T23:05:08.028810+11:00 phosphor sshd-session[377564]: Failed password for invalid user alpine from 185.213.154.248 port 51396 ssh2 2026-11-06T23:05:10.830726+11:00 phosphor sshd-session[377564]: Failed password for invalid user alpine from 185.213.154.248 port 51396 ssh2 ... show less	Brute-Force SSH
🇫🇷 Asaman	2026-11-06 11:47:40 UTC · (6 days ago)	2026-11-06T12:47:34.476264+01:00 aligw01.aneirin.net sshd-session[2806]: Invalid user alpine from 185.213.154.248 port 56446 2026-11-06T12:47:37.244675+01:00 aligw01.aneirin.net sshd-session[2806]: Failed password for invalid user alpine from 185.213 ... show more 2026-11-06T12:47:34.476264+01:00 aligw01.aneirin.net sshd-session[2806]: Invalid user alpine from 185.213.154.248 port 56446 2026-11-06T12:47:37.244675+01:00 aligw01.aneirin.net sshd-session[2806]: Failed password for invalid user alpine from 185.213.154.248 port 56446 ssh2 2026-11-06T12:47:40.030419+01:00 aligw01.aneirin.net sshd-session[2806]: Failed password for invalid user alpine from 185.213.154.248 port 56446 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-11-06 09:57:42 UTC · (6 days ago)	Large amount of failed SSH access attempts (brute-force)	Brute-Force SSH
🇩🇪 ghostwarriors	2026-11-06 08:50:36 UTC · (6 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 XeroX	2026-11-06 08:49:02 UTC · (6 days ago)	2026-11-06T09:48:59.018360+01:00 de2 sshd-session[13429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.213.154.248 2026-11-06T09:49:00.954644+01:00 de2 sshd-session[13429]: Failed password for invalid us ... show more 2026-11-06T09:48:59.018360+01:00 de2 sshd-session[13429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.213.154.248 2026-11-06T09:49:00.954644+01:00 de2 sshd-session[13429]: Failed password for invalid user alpine from 185.213.154.248 port 58236 ssh2 ... show less	Brute-Force SSH
🇺🇸 rellim.com	2026-11-06 08:45:42 UTC · (6 days ago)	Nov 6 00:45:41 spidey sshd-session[381817]: Invalid user alpine from 185.213.154.248 port 49916 Nov 6 00:45:41 spidey sshd-session[381819]: Invalid user alpine from 185.213.154.248 port 57494 Nov 6 00:45:42 spidey sshd-session[381821]: Invalid use ... show more Nov 6 00:45:41 spidey sshd-session[381817]: Invalid user alpine from 185.213.154.248 port 49916 Nov 6 00:45:41 spidey sshd-session[381819]: Invalid user alpine from 185.213.154.248 port 57494 Nov 6 00:45:42 spidey sshd-session[381821]: Invalid user alpine from 185.213.154.248 port 37282 ... show less	Brute-Force SSH
🇸🇬 Leslie Alexander	2026-11-06 08:38:11 UTC · (6 days ago)	Nov 6 08:38:10 instance-20260223-1230 sshd-session[85893]: Invalid user alpine from 185.213.154.248 port 44414 ...	Brute-Force SSH
Anonymous	2026-11-06 08:36:45 UTC · (6 days ago)	Nov 6 08:36:44 f2b auth.info sshd[12108]: Invalid user alpine from 185.213.154.248 port 43122 Nov 6 08:36:44 f2b auth.info sshd[12108]: Failed password for invalid user alpine from 185.213.154.248 port 43122 ssh2 Nov 6 08:36:44 f2b auth.info sshd[ ... show more Nov 6 08:36:44 f2b auth.info sshd[12108]: Invalid user alpine from 185.213.154.248 port 43122 Nov 6 08:36:44 f2b auth.info sshd[12108]: Failed password for invalid user alpine from 185.213.154.248 port 43122 ssh2 Nov 6 08:36:44 f2b auth.info sshd[12108]: Failed password for invalid user alpine from 185.213.154.248 port 43122 ssh2 ... show less	Brute-Force SSH
🇺🇸 Phil Schuyler	2026-11-06 00:00:00 UTC · (6 days ago)	Observed 2 honeypot events targeting a TCP honeypot service.	Port Scan
Anonymous	2026-11-05 20:45:45 UTC · (6 days ago)	Nov 5 20:45:44 f2b auth.info sshd[1290308]: Invalid user alpine from 185.213.154.248 port 53316 Nov 5 20:45:44 f2b auth.info sshd[1290308]: Failed password for invalid user alpine from 185.213.154.248 port 53316 ssh2 Nov 5 20:45:45 f2b auth.info s ... show more Nov 5 20:45:44 f2b auth.info sshd[1290308]: Invalid user alpine from 185.213.154.248 port 53316 Nov 5 20:45:44 f2b auth.info sshd[1290308]: Failed password for invalid user alpine from 185.213.154.248 port 53316 ssh2 Nov 5 20:45:45 f2b auth.info sshd[1290308]: Failed password for invalid user alpine from 185.213.154.248 port 53316 ssh2 ... show less	Brute-Force SSH
🇩🇪 LRob	2026-11-05 10:13:56 UTC · (1 week ago)	Shop search flood (L7 DDoS) \| path: /3-velos \| query: q=Taille-XL/Famille-Aerostorm-Contrail \| src_port: 48452	DDoS Attack Web App Attack
🇫🇮 as211431.net	2026-10-29 22:45:31 UTC · (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from SE. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /auth UA: "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 S ... show more Triggered Cloudflare WAF (firewallCustom) from SE. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /auth UA: "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604." This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Carsten	2026-10-29 08:06:59 UTC · (2 weeks ago)	GET [auth]	Port Scan

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 92.118.39.71

🇳🇱 77.67.26.58

🇬🇧 35.203.210.106

🇺🇸 216.25.89.119

🇦🇷 181.191.65.131

🇫🇷 164.68.118.223

🇯🇵 153.122.19.153

🇫🇷 141.101.68.88

🇳🇱 77.239.124.78

🇳🇱 45.153.34.4

🇰🇷 39.119.3.83

🇺🇦 31.129.235.207

🇭🇺 195.38.115.178

🇫🇷 172.120.139.186

🇵🇱 172.64.200.115

🇧🇩 103.159.2.113

🇰🇿 88.204.245.66

🇺🇸 205.210.31.13

🇵🇪 200.60.110.9

🇺🇸 165.227.200.152