192.161.48.138

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
81% Critical
17 reports
16 reporters · latest 2 days ago
ISP
HostPapa
Usage Type
Data Center/Web Hosting/Transit
ASN
AS36352
Domain Name
hostpapa.com
Country
🇺🇸 United States of America
City
Los Angeles, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇿 Czechia 2 🇩🇪 Germany 2 🇫🇷 France 2
Most common categories Port Scan 13 Hacking 4 Brute-Force 4 DDoS Attack 1 Web Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇸🇰 GOVCERT
Excessive Firewall Denies
DDoS Attack Web Spam
🇫🇷 uthul
T-Pot honeypot: 28 hits on ports [3389, 3390] (automated)
Port Scan Brute-Force
🇯🇵 knock
Knock-Knock honeypot brute-force: RDP (2 total hits)
Brute-Force
🇨🇿 Countryman
repeated unauthorized connection attempts, host sweep, port 3389
Hacking Brute-Force
🇨🇿 Countryman
repeated unauthorized connection attempts, host sweep, port 3389
Hacking Brute-Force
Anonymous
PROTO=TCP DPT=3389
Port Scan Hacking
🇫🇷 GabrielJST
*Port Scan* detected from 192.161.48.138 (US/United States/-).
Port Scan
🇷🇴 abuse_IP_reporter
Nov 10 23:22:12 server UFW BLOCK SRC=192.161.48.138 DF PROTO=TCP SPT=65344
Port Scan
🇭🇰 azminawwar
[192.161.48.138] triggered by honeypot on port [3389], Timestamp [2026-11-10T18:19:34Z] +& Cookie: mstshash=Almaz
Port Scan Hacking
🇫🇮 anycast_ac
Blocked by UFW on legacypanel [3389/tcp] | SPT: 60072 | TTL: 107 | LEN: 52 | TOS: 0x00 • Reported by: FemboyHolding LTD
Port Scan
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan
Anonymous
Port scan against our edge firewall, detected by Wazuh: Regel 100502 | abuseipdb 35% (5 Meldungen, US)
Port Scan
🇳🇱 pearbright
Port Scan
🇳🇱 i-turnradio.nl
2026-11-02 05:16:21 +01:00 - Unsolicited TCP connection to a honeypot port; probing port 3389.
Port Scan
🇦🇺 HostFission
PSAD port scan detected
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.203
🇧🇷 130.49.113.252
🇷🇺 62.76.64.90
🇫🇮 45.133.115.225
🇭🇰 45.64.112.230
🇧🇷 35.198.3.94
🇧🇪 34.76.27.30
🇧🇪 34.38.19.77
🇵🇰 223.123.13.127
🇰🇷 211.197.62.36
🇺🇸 193.37.252.71
🇯🇵 106.153.181.80
🇭🇰 46.247.61.40
🇯🇵 43.167.198.92
🇺🇸 34.48.226.195
🇳🇱 5.231.242.46
🇨🇭 209.99.185.195
🇸🇬 168.107.78.68
🇭🇰 156.225.1.86
🇨🇳 114.237.144.239
feedback