Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 192.253.248.216
This IP address has been reported a total of
103
times from
8 distinct
sources.
192.253.248.216 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
China
with 65
reports;
Hong Kong
with 28
reports;
United States of America
with 1
report.
The most common categories in these recent reports were:
Brute-Force
67
times;
SSH
65
times;
Port Scan
60
times;
Hacking
31
times;
Bad Web Bot
29
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 2270)
Source port: 42013
TTL: 239
Packet length: 40
TOS: 0x14
This report (f ...
show moreBlocked by UFW (TCP on 2270)
Source port: 42013
TTL: 239
Packet length: 40
TOS: 0x14
This report (for 192.253.248.216) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 10222)
Source port: 57281
TTL: 242
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 10222)
Source port: 57281
TTL: 242
Packet length: 40
TOS: 0x14
This report (for 192.253.248.216) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 8123)
Source port: 45882
TTL: 241
Packet length: 40
TOS: 0x14
This report (f ...
show moreBlocked by UFW (TCP on 8123)
Source port: 45882
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 192.253.248.216) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Massive SSH honeypot brute-force: 10002 connections / 10000 unique credential attempts in 3 hours (1 ...
show moreMassive SSH honeypot brute-force: 10002 connections / 10000 unique credential attempts in 3 hours (10:41-13:53 UTC, 2026-09-26), then successfully logged into honeypot with root/123456 and admin/admin. Attempted PERSISTENT SSH BACKDOOR: mkdir ~/.ssh, chattr -i .ssh, wrote attacker RSA-2048 public key (admin@nas-server) into authorized_keys, chmod 700/600. Full session recorded (creds, commands, timing). Also tried high-entropy credentials (administrator/Admin@2024, 22&%DJO*8Ph@...) indicating large leaked credential database. IOC: attacker pubkey AAAAB3NzaC1yc2EAAAADAQABAAABAQDHnnisa2h... admin@nas-server
show less
Brute-Force
SSH
Hacking
Anonymous
Blocked by UFW (TCP on 23)
Source port: 51024
TTL: 241
Packet length: 40
TOS: 0x14
This report (for ...
show moreBlocked by UFW (TCP on 23)
Source port: 51024
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 192.253.248.216) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
Anonymous
Blocked by UFW (TCP on 2222)
Source port: 44139
TTL: 239
Packet length: 40
TOS: 0x14
This report (f ...
show moreBlocked by UFW (TCP on 2222)
Source port: 44139
TTL: 239
Packet length: 40
TOS: 0x14
This report (for 192.253.248.216) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 20044)
Source port: 59241
TTL: 241
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 20044)
Source port: 59241
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 192.253.248.216) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 22222)
Source port: 44348
TTL: 242
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 22222)
Source port: 44348
TTL: 242
Packet length: 40
TOS: 0x14
This report (for 192.253.248.216) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 722)
Source port: 44890
TTL: 240
Packet length: 40
TOS: 0x14
This report (fo ...
show moreBlocked by UFW (TCP on 722)
Source port: 44890
TTL: 240
Packet length: 40
TOS: 0x14
This report (for 192.253.248.216) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 21339)
Source port: 40185
TTL: 238
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 21339)
Source port: 40185
TTL: 238
Packet length: 40
TOS: 0x14
This report (for 192.253.248.216) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
SSH authentication failures over threshold (4/600s). Attempts: user=unknown src_port=57664; user=unk ...
show moreSSH authentication failures over threshold (4/600s). Attempts: user=unknown src_port=57664; user=unknown src_port=36318. Password plaintext is not available in dropbear logs.
show less
SSH authentication failures over threshold (4/600s). Attempts: user=unknown src_port=49204; user=unk ...
show moreSSH authentication failures over threshold (4/600s). Attempts: user=unknown src_port=49204; user=unknown src_port=44378. Password plaintext is not available in dropbear logs.
show less
