JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.248.171.12

185.248.171.12 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	Merezha LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206963
Domain Name	merezha.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.248.171.12

Whois 185.248.171.12

IP Abuse Reports for 185.248.171.12:

This IP address has been reported a total of 21 times from 19 distinct sources. 185.248.171.12 was first reported on July 7th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 astijf	2026-07-08 19:18:50 (5 hours ago)	Port Scan detected from 185.248.171.12 (GB/United Kingdom/-). 5 hits in the last 1627 seconds	Brute-Force Port Scan
🇭🇰 sandra361	2026-07-08 15:25:22 (9 hours ago)	Port scan detected: 5 attempts across 5 ports (5910,5917,5941,5957,5958). \| Evidence: GHOST_SCAN: IN ... show more Port scan detected: 5 attempts across 5 ports (5910,5917,5941,5957,5958). \| Evidence: GHOST_SCAN: IN=eth0 SRC=185.248.171.12 LEN=44 TOS=0x14 PREC=0x00 TTL=242 ID=58957 PROTO=TCP SPT=61234 DPT=5957 WINDOW=1025 RES=0x00 SYN URGP=0 show less	Port Scan
🇧🇷 diego	2026-07-08 12:15:17 (12 hours ago)	[rede-164-29] Port Scan detected from 185.248.171.12 (GB/United Kingdom/-). 11 hits in the last 25 ... show more [rede-164-29] Port Scan detected from 185.248.171.12 (GB/United Kingdom/-). 11 hits in the last 255 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jul 8 09:13:41 kernel: [1139381.040921] Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=185.248.171.12 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=12379 PROTO=TCP SPT=61234 DPT=5961 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 8 09:13:50 kernel: [1139389.665754] Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=185.248.171.12 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=62289 PROTO=TCP SPT=61234 DPT=59 show less	Port Scan
Anonymous	2026-07-08 11:29:54 (13 hours ago)	185.248.171.12 detected on srv02	Port Scan
🇫🇷 security.rdmc.fr	2026-07-07 23:27:46 (1 day ago)	Port Scan Attack proto:TCP src:61234 dst:5900	Port Scan
🇩🇪 R.G.	2026-07-07 22:54:21 (1 day ago)	Port Scan detected from 185.248.171.12 (CZ/Czechia/-). 11 hits in the last 255 seconds; Ports: ; ... show more Port Scan* detected from 185.248.171.12 (CZ/Czechia/-). 11 hits in the last 255 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jul 8 00:50:19 kernel: Firewall: TCP_IN Blocked* IN=enp5s0 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=185.248.171.12 DST=0.X.X.X LE show less	Port Scan
🇫🇷 ISPLtd	2026-07-07 22:46:55 (1 day ago)	Jul 7 19:45:30 185.248.171.12 TCP SPT=61234 DPT=5985 SYN Jul 7 19:46:12 185.248.171.12 TCP SPT=612 ... show more Jul 7 19:45:30 185.248.171.12 TCP SPT=61234 DPT=5985 SYN Jul 7 19:46:12 185.248.171.12 TCP SPT=61234 DPT=5987 SYN Jul 7 19:46:54 185.248.171.12 TCP SPT=61234 DPT=5988 ... show less	Port Scan
🇦🇹 begou.dev	2026-07-07 20:11:51 (1 day ago)	[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/5900	Port Scan
🇦🇹 begou.dev	2026-07-07 19:41:50 (1 day ago)	[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/5901	Port Scan
🇩🇪 grassau.com	2026-07-07 19:37:19 (1 day ago)	Port Scan detected from 185.248.171.12 (GB/United Kingdom/-/-/-).	Port Scan
🇮🇹 Fusty	2026-07-07 18:50:30 (1 day ago)	Unauthorized attempt on (TCP on port 5927). Source port: 61234 TTL: 248 Packet length: 44 Timestamp: ... show more Unauthorized attempt on (TCP on port 5927). Source port: 61234 TTL: 248 Packet length: 44 Timestamp: 2026-07-07 20:50:29 show less	Port Scan
Anonymous	2026-07-07 17:59:52 (1 day ago)	Heralding honeypot: vnc on port 5900	Brute-Force
🇺🇸 drewf.ink	2026-07-07 16:15:34 (1 day ago)	[16:15] Port scanning. Port(s) scanned: TCP/6000	Port Scan
🇨🇭 Elysium Security	2026-07-07 14:31:10 (1 day ago)	Mass port scanning on a whole network	Port Scan
Anonymous	2026-07-07 11:22:33 (1 day ago)	Jul 7 07:22:11 localhost kernel: [111768579.038254] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 7 07:22:11 localhost kernel: [111768579.038254] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=185.248.171.12 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=7351 PROTO=TCP SPT=61234 DPT=5909 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 7 07:22:11 localhost kernel: [111768579.038262] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=185.248.171.12 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=7351 PROTO=TCP SPT=61234 DPT=5909 SEQ=1216310236 ACK=0 WINDOW=1025 RES=0x00 SYN URGP=0 OPT (020405B4) Jul 7 07:22:32 localhost kernel: [111768599.594005] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=185.248.171.12 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=10497 PROTO=TCP SPT=61234 DPT=5912 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 7 07:22:32 localhost kernel: [111768599.594027] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=185.248.171.12 DST=[munged show less	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:332::5

🇩🇪 188.166.162.240

🇨🇦 159.89.114.246

🇮🇳 157.66.191.148

🇮🇹 151.60.213.162

🇳🇱 89.32.243.133

🇩🇪 64.89.163.22

🇺🇸 20.127.25.202

🇺🇸 2604:a880:2:d1:0:1:51dc:5001

🇨🇳 223.73.144.83

🇬🇧 213.166.84.58

🇳🇱 204.76.203.15

🇹🇼 198.235.24.46

🇻🇪 190.123.66.109

🇲🇽 187.140.91.231

🇺🇸 184.180.187.146

🇺🇸 162.216.150.254

🇩🇪 157.230.123.220

🇭🇺 152.66.81.113

🇸🇬 104.233.38.130