JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.95.2.248

193.95.2.248 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 100%: ?

100%

ISP	ATI - Agence Tunisienne Internet
Usage Type	Fixed Line ISP
ASN	AS31245
Domain Name	ati.tn
Country	🇹🇳 Tunisia
City	Tunis, Tunis Governorate

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.95.2.248

Whois 193.95.2.248

IP Abuse Reports for 193.95.2.248:

This IP address has been reported a total of 65 times from 51 distinct sources. 193.95.2.248 was first reported on August 18th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Nick2	2026-10-17 12:57:37 (5 hours ago)	2026-10-17 12:57:36 connection from 193.95.2.248 2026-10-17 12:57:36 connection from 193.95.2.248 20 ... show more 2026-10-17 12:57:36 connection from 193.95.2.248 2026-10-17 12:57:36 connection from 193.95.2.248 2026-10-17 12:57:36 connection from 193.95.2.248 2026-10-17 12:57:36 connection from 193.95.2.248 2026-10-17 12:57:36 connection from 193.95.2.248 ... show less	Brute-Force Port Scan SSH
🇺🇸 wimaxnz	2026-10-16 23:59:07 (18 hours ago)	Automated report from 247 Guardian: repeated malicious activity detected. \| reason=ssh_failed	Brute-Force SSH Port Scan
🇳🇱 hydrattack.com	2026-10-15 14:01:24 (2 days ago)	Oct 15 17:01:22 HydrAttack-TW-HL sshd[3424641]: Invalid user user from 193.95.2.248 port 50194 Oct 1 ... show more Oct 15 17:01:22 HydrAttack-TW-HL sshd[3424641]: Invalid user user from 193.95.2.248 port 50194 Oct 15 17:01:23 HydrAttack-TW-HL sshd[3424643]: Invalid user user from 193.95.2.248 port 50201 Oct 15 17:01:23 HydrAttack-TW-HL sshd[3424645]: Invalid user user from 193.95.2.248 port 50213 Oct 15 17:01:23 HydrAttack-TW-HL sshd[3424647]: Invalid user user from 193.95.2.248 port 50219 Oct 15 17:01:23 HydrAttack-TW-HL sshd[3424649]: Invalid user user from 193.95.2.248 port 50224 ... show less	Brute-Force
🇮🇹 CoreTech srl	2026-10-15 13:36:45 (2 days ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇺🇸 CowGL	2026-10-14 05:12:52 (3 days ago)	2026-10-14T06:12:48.063847maoyue-lax1 sshd[503785]: Connection closed by authenticating user root 19 ... show more 2026-10-14T06:12:48.063847maoyue-lax1 sshd[503785]: Connection closed by authenticating user root 193.95.2.248 port 54749 [preauth] 2026-10-14T06:12:49.066358maoyue-lax1 sshd[503787]: Connection closed by authenticating user root 193.95.2.248 port 54773 [preauth] 2026-10-14T06:12:50.070102maoyue-lax1 sshd[503789]: Connection closed by authenticating user root 193.95.2.248 port 54800 [preauth] 2026-10-14T06:12:51.084965maoyue-lax1 sshd[503791]: Connection closed by authenticating user root 193.95.2.248 port 54832 [preauth] show less	Brute-Force SSH
🇩🇪 Nick2	2026-10-12 21:09:59 (4 days ago)	2026-10-12 21:09:57 connection from 193.95.2.248 2026-10-12 21:09:57 connection from 193.95.2.248 20 ... show more 2026-10-12 21:09:57 connection from 193.95.2.248 2026-10-12 21:09:57 connection from 193.95.2.248 2026-10-12 21:09:58 connection from 193.95.2.248 2026-10-12 21:09:58 connection from 193.95.2.248 2026-10-12 21:09:58 connection from 193.95.2.248 ... show less	Brute-Force Port Scan SSH
🇩🇪 www.fransveldman.world	2026-10-11 12:10:22 (6 days ago)	2026-10-11T12:10:21.733406+00:00 localhost sshd[3129161]: Invalid user user from 193.95.2.248 port 5 ... show more 2026-10-11T12:10:21.733406+00:00 localhost sshd[3129161]: Invalid user user from 193.95.2.248 port 52243 2026-10-11T12:10:21.996517+00:00 localhost sshd[3129163]: Invalid user user from 193.95.2.248 port 52252 ... show less	Brute-Force SSH
🇦🇺 marshy.com.au	2026-10-10 22:56:38 (6 days ago)	(sshd) Failed SSH login from 193.95.2.248 (TN/Tunisia/-): 5 in the last 3600 secs; Ports: ; Directi ... show more (sshd) Failed SSH login from 193.95.2.248 (TN/Tunisia/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 09:56:24 ded01 sshd[2033166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.95.2.248 user=root Oct 11 09:56:26 ded01 sshd[2033166]: Failed password for root from 193.95.2.248 port 39434 ssh2 Oct 11 09:56:28 ded01 sshd[2033197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.95.2.248 user=root Oct 11 09:56:30 ded01 sshd[2033197]: Failed password for root from 193.95.2.248 port 39527 ssh2 Oct 11 09:56:32 ded01 sshd[2033227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.95.2.248 user=root show less	Port Scan
🇩🇪 ghostwarriors	2026-10-08 16:20:28 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 ITSNF	2026-10-08 01:20:03 (1 week ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=22	Port Scan Hacking
Anonymous	2026-10-07 02:28:47 (1 week ago)	MikroTik Enterprise Honeypot	Port Scan
🇨🇿 lp	2026-10-04 21:19:08 (1 week ago)	SSH Brute force: 22 attempts were recorded from 193.95.2.248 2026-10-04T22:27:05+02:00 Connection cl ... show more SSH Brute force: 22 attempts were recorded from 193.95.2.248 2026-10-04T22:27:05+02:00 Connection closed by authenticating user root 193.95.2.248 port 58637 [preauth] 2026-10-04T22:27:08+02:00 Connection closed by authenticating user root 193.95.2.248 port 58702 [preauth] 2026-10-04T22:27:11+02:00 Connection closed by authenticating user root 193.95.2.248 port 58774 [preauth] 2026-10-04T22:27:14+02:00 Connection closed by authenticating user root 193.95.2.248 port 58831 [preauth] 2026-10-04T22:27:19+02:00 Connection closed by authenticating user root 193.95.2.248 port 58894 [preauth] 2026-10-04T22:27:21+02:00 Connection closed by authenticating user root 193.95.2.248 port 59022 [preauth] 2026-10-04T22:27:24+02:00 Connection closed by authenticating user root 193.95.2.248 port 59078 [preauth] 2026-10-04T22:27:41+02:00 Invalid user user from 193.95.2.248 port 59666 2026-10-04T22:27:43+02:0 show less	Brute-Force SSH
🇩🇪 IloGus	2026-10-04 14:17:46 (1 week ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇺🇸 Veslys	2026-10-04 11:03:58 (1 week ago)	2026-10-04T16:33:54.456854+05:30 ittifakordusu sshd-session[743360]: Failed password for root from 1 ... show more 2026-10-04T16:33:54.456854+05:30 ittifakordusu sshd-session[743360]: Failed password for root from 193.95.2.248 port 58418 ssh2 2026-10-04T16:33:55.850952+05:30 ittifakordusu sshd-session[743406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.95.2.248 user=root 2026-10-04T16:33:57.749057+05:30 ittifakordusu sshd-session[743406]: Failed password for root from 193.95.2.248 port 58584 ssh2 ... show less	Brute-Force SSH
🇺🇸 Veslys	2026-10-04 10:39:11 (1 week ago)	2026-10-04T16:09:06.870118+05:30 ittifakordusu sshd-session[726274]: Failed password for root from 1 ... show more 2026-10-04T16:09:06.870118+05:30 ittifakordusu sshd-session[726274]: Failed password for root from 193.95.2.248 port 50178 ssh2 2026-10-04T16:09:08.120152+05:30 ittifakordusu sshd-session[726312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.95.2.248 user=root 2026-10-04T16:09:10.192221+05:30 ittifakordusu sshd-session[726312]: Failed password for root from 193.95.2.248 port 50255 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 121.229.156.40

🇨🇳 113.108.144.34

🇨🇳 61.138.113.187

🇧🇪 35.240.58.49

🇰🇷 211.62.96.42

🇻🇪 190.203.26.215

🇺🇸 174.76.33.8

🇨🇴 149.130.179.88

🇺🇸 129.121.140.234

🇨🇳 114.244.208.212

🇷🇴 92.118.39.71

🇦🇪 86.98.17.232

🇨🇳 60.208.177.218

🇰🇷 59.8.107.16

🇷🇺 31.173.12.27

🇬🇧 188.240.59.35

🇺🇸 143.42.173.101

🇳🇱 109.160.32.172

🇨🇦 85.217.149.46

🇫🇷 85.217.140.16