AbuseIPDB » 185.248.143.219

185.248.143.219 was found in our database!

This IP was reported 984 times. Confidence of Abuse is 100%: ?

100%

ISP	IP-Projects GmbH & Co. KG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48314
Hostname(s)	vmanager10075.premium-vserver.net
Domain Name	ip-projects.de
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 185.248.143.219

Whois 185.248.143.219

IP Abuse Reports for 185.248.143.219:

This IP address has been reported a total of 984 times from 389 distinct sources. 185.248.143.219 was first reported on May 12th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
rtbh.com.tr	2025-08-02 20:08:01 (4 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-08-01 20:08:00 (5 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ghostwarriors	2025-07-31 22:20:28 (6 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
rtbh.com.tr	2025-07-30 20:07:58 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Alexandr Kulkov	2025-07-30 11:46:27 (1 week ago)	2025-07-26T03:16:40.404817+07:00 sz sshd[1216222]: pam_unix(sshd:auth): authentication failure; logn ... show more2025-07-26T03:16:40.404817+07:00 sz sshd[1216222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.248.143.219 user=root 2025-07-26T03:16:42.626649+07:00 sz sshd[1216222]: Failed password for root from 185.248.143.219 port 56590 ssh2 ... show less	Brute-Force SSH
ThreatBook.io	2025-07-30 00:09:14 (1 week ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/185.248.143.219	SSH
rtbh.com.tr	2025-07-29 20:07:56 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
sh97	2025-07-29 03:37:45 (1 week ago)	US02-RN-LAX: SSH Brute Force from 185.248.143.219 at 2025-07-29 09:07:45 IST	Brute-Force SSH
sverre26	2025-07-29 01:42:58 (1 week ago)	Bruteforce detected by fail2ban	Brute-Force SSH
Anonymous	2025-07-29 00:51:33 (1 week ago)	SSH Brute Force detected by Fail2Ban	Brute-Force SSH
ThreatBook.io	2025-07-28 23:58:32 (1 week ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/185.248.143.219	SSH
urnilxfgbez	2025-07-28 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
rtbh.com.tr	2025-07-28 20:07:56 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
pip4pip.com	2025-07-28 19:57:59 (1 week ago)	Pip4Pip:IT-Team Reports :: Pip4Pip Always Appreciate A Home Visit More Than	Hacking Brute-Force SSH
trivox.sh	2025-07-28 15:08:21 (1 week ago)	Jul 28 17:02:24 debian sshd[3027779]: Connection closed by invalid user 185.248.143.219 port 39476 ... show moreJul 28 17:02:24 debian sshd[3027779]: Connection closed by invalid user 185.248.143.219 port 39476 [preauth] Jul 28 17:08:18 debian sshd[3028031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.248.143.219 user=root Jul 28 17:08:21 debian sshd[3028031]: Failed password for root from 185.248.143.219 port 33034 ssh2 Jul 28 17:08:21 debian sshd[3028033]: Invalid user pi from 185.248.143.219 port 45832 Jul 28 17:08:21 debian sshd[3028031]: Connection closed by authenticating user root 185.248.143.219 port 33034 [preauth] ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩