JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.248.171.2

185.248.171.2 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	Merezha LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206963
Domain Name	merezha.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.248.171.2

Whois 185.248.171.2

IP Abuse Reports for 185.248.171.2:

This IP address has been reported a total of 35 times from 29 distinct sources. 185.248.171.2 was first reported on July 20th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cwytech	2026-07-24 02:50:58 (4 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/global-exclusion-high.	Hacking
🇵🇱 sefinek.net	2026-07-24 00:51:40 (6 hours ago)	Blocked by UFW on PL02 [5992/tcp] \| SPT: 61000 \| TTL: 251 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on PL02 [5992/tcp] \| SPT: 61000 \| TTL: 251 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-24 00:30:06 (6 hours ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 sthoyer.de	2026-07-24 00:27:20 (6 hours ago)	Jul 24 02:26:44 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jul 24 02:26:44 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.248.171.2 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=1659 PROTO=TCP SPT=61000 DPT=5983 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 24 02:27:19 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.248.171.2 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=13681 PROTO=TCP SPT=61000 DPT=5992 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 24 02:27:19 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.248.171.2 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=13681 PROTO=TCP SPT=61000 DPT=5992 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 WebNiraj	2026-07-23 23:47:55 (7 hours ago)	Port Scan detected from 185.248.171.2 (CZ/Czechia/-). 11 hits in the last 245 seconds [SIGMA]	Brute-Force Port Scan
🇫🇷 Little Iguana	2026-07-23 23:43:52 (7 hours ago)	trying to access non-authorized port	Port Scan
🇫🇷 sthoyer.de	2026-07-23 23:42:20 (7 hours ago)	Jul 24 01:40:31 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jul 24 01:40:31 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.248.171.2 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=32575 PROTO=TCP SPT=61000 DPT=5980 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 24 01:40:31 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.248.171.2 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=27224 PROTO=TCP SPT=61000 DPT=5927 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 24 01:41:27 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.248.171.2 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=42755 PROTO=TCP SPT=61000 DPT=5990 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 24 01:41:48 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=185.248.171.2 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=9315 PROTO=TCP SPT=61000 DPT=5959 WINDOW=1025 RES=0x ... show less	Port Scan
🇮🇱 spd.co.il	2026-07-23 23:02:17 (7 hours ago)	Port scan detected on multiple ports	Port Scan
🇨🇦 polycoda	2026-07-23 20:11:26 (10 hours ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇸🇬 celestialcity	2026-07-23 20:10:26 (10 hours ago)	Blocked by UFW on celestialcityas [5901/tcp] \| SPT: 61000 \| TTL: 240 \| LEN: 44 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityas [5901/tcp] \| SPT: 61000 \| TTL: 240 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Slackin' Jack	2026-07-23 04:36:16 (1 day ago)	Triggered honeypot on port 5900. (185.248.171.2)	Port Scan
🇩🇪 centurion	2026-07-22 18:04:45 (1 day ago)	Blocked by UFW on ns02 [5934/tcp] Source port: 61000 TTL: 250 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on ns02 [5934/tcp] Source port: 61000 TTL: 250 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-07-22 09:58:55 (1 day ago)	[rede-168-134] 07/22/2026-06:58:55.538992, 185.248.171.2, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-168-134] 07/22/2026-06:58:55.538992, 185.248.171.2, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 250 show less	Hacking
🇫🇷 JPPO	2026-07-22 08:52:58 (1 day ago)	Multiport scan 20 ports : 5901 5902 5906 5907 5925 5926 5930 5933 5945 5947 5950 5954 5956 5961 5962 ... show more Multiport scan 20 ports : 5901 5902 5906 5907 5925 5926 5930 5933 5945 5947 5950 5954 5956 5961 5962 5963 5966 5978 5979 5984 show less	Port Scan
🇨🇦 Arpan Sen	2026-07-22 07:39:59 (1 day ago)	Network port/address scan: probed 101 distinct port(s) across 64 host(s); 100% of connections receiv ... show more Network port/address scan: probed 101 distinct port(s) across 64 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 193.141.65.199

🇸🇬 188.166.214.166

🇳🇱 185.107.80.93

🇧🇷 162.141.110.117

🇻🇳 14.191.216.183

🇧🇼 168.167.72.132

🇺🇸 165.154.172.37

🇺🇸 136.108.4.252

🇫🇷 135.125.29.129

🇿🇦 102.33.122.35

🇭🇰 101.36.110.41

🇺🇸 91.230.168.199

🇦🇲 87.241.158.216

🇺🇸 65.49.20.115

🇺🇸 20.65.193.255

🇧🇪 198.235.24.182

🇺🇸 195.184.76.227

🇧🇷 192.141.113.57

🇻🇳 171.231.187.209

🇫🇷 91.238.181.92