192.220.24.148

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
26 reports
24 reporters · latest 1 week ago
ISP
NTT America, Inc.
Usage Type
Fixed Line ISP
ASN
AS2914
Domain Name
ntt.net
Country
🇺🇸 United States of America
City
Los Angeles, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
26 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 7 🇺🇸 United States of America 7 🇫🇷 France 4
Most common categories Port Scan 23 Hacking 5 Brute-Force 2 Exploited Host 2 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇪 RoboSOC
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
Anonymous
Brute-Force Web App Attack
🇫🇷 uthul
T-Pot honeypot: 48 hits on ports [8788] (automated)
Port Scan
🇷🇴 abuse_IP_reporter
Nov 5 06:03:52 server UFW BLOCK SRC=192.220.24.148 PROTO=TCP SPT=51339 DPT=8788
Port Scan
🇬🇧 essinghigh
IPS Detection: 192.220.24.148 -> DPT: 8081
Port Scan
🇺🇸 donarev419
Connection to port 8788 with data transfer. Data preview: GET /panel/status HTTP/1.1 Host: 5.230.173.215:8788 Connection: close
Port Scan Hacking
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 7 payload-bearing connection/event(s), 518 payload byte(s) total, maximum payload 75 byte(s). Target port(s): 8788.
Port Scan Hacking
🇫🇮 6kilowatti
Port Scan
🇹🇷 alastyr
Port scan: probes to 3 unused addresses of AS3188 within 60 s. 1521 further packets from this source blocked during the following ban. Ports: 8788. Detected by Alastyr network sensor (XDP).
Port Scan
🇯🇵 jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (193 distinct dst hosts)
Port Scan
🇩🇪 Admins@Storch
IPS:drop <match> dstport=8788
Brute-Force Exploited Host
🇺🇸 MPL
tcp/8788 (46 or more attempts)
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 8788
Port Scan Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 207.175.26.115
🇺🇸 147.182.174.36
🇨🇳 118.145.238.115
🇷🇺 109.63.148.45
🇺🇸 107.150.105.5
🇺🇸 67.205.189.91
🇺🇸 45.153.102.235
🇧🇪 35.210.253.69
🇺🇸 34.187.206.86
🇺🇸 23.234.92.125
🇺🇸 23.234.82.56
🇺🇸 23.234.78.115
🇺🇸 23.162.8.149
🇧🇷 187.20.29.67
🇺🇸 172.234.25.150
🇮🇶 151.244.159.150
🇫🇮 147.185.133.17
🇺🇸 146.70.171.68
🇺🇸 146.70.168.233
🇲🇲 103.57.207.59
feedback