This IP address has been reported a total of
19
times from
14 distinct
sources.
195.254.165.248 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=195.254.165.248; proto=TCP; source_port=61000; target_port=5996; flags=SYN
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc).
Family fingerprint: ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc).
Family fingerprint: vnc-scanner
Commands captured:
$ client RFB version: RFB 003.008
$ chose security type: 1 (None)
$ server challenge: 32116a729ece21c158418f799cb19459
show less
*Port Scan* detected from 195.254.165.248 (NL/The Netherlands/-). 11 hits in the last 85 seconds (0- ...
show more*Port Scan* detected from 195.254.165.248 (NL/The Netherlands/-). 11 hits in the last 85 seconds (0-131)
show less
Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked ...
show moreFirewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked offender
...
show less
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 5906, 5908, 5912, 5913, 5 ...
show morePort scan from this IP. Firewall dropped every packet. Targeted TCP ports: 5906, 5908, 5912, 5913, 5918, 5921, 5923, 5925. Activity window: 2026-07-21 14:29 UTC to 2026-07-21 15:31 UTC.
show less
Blocked by OPNsense firewall; 30 hits, proto=tcp, ports=5901,5909,5911,5915,5920,5922,5926,5932,5933 ...
show moreBlocked by OPNsense firewall; 30 hits, proto=tcp, ports=5901,5909,5911,5915,5920,5922,5926,5932,5933,5936,5938,5941,
show less
Blocked by OPNsense firewall; 66 hits, proto=tcp, ports=5900,5901,5904,5905,5909,5910,5912,5915,5917 ...
show moreBlocked by OPNsense firewall; 66 hits, proto=tcp, ports=5900,5901,5904,5905,5909,5910,5912,5915,5917,5918,5919,5924,
show less
Blocked by OPNsense firewall; 60 hits, proto=tcp, ports=5901,5902,5906,5907,5909,5910,5912,5913,5916 ...
show moreBlocked by OPNsense firewall; 60 hits, proto=tcp, ports=5901,5902,5906,5907,5909,5910,5912,5913,5916,5918,5919,5922,
show less
Blocked by OPNsense firewall; 59 hits, proto=tcp, ports=5902,5904,5905,5907,5910,5912,5913,5916,5918 ...
show moreBlocked by OPNsense firewall; 59 hits, proto=tcp, ports=5902,5904,5905,5907,5910,5912,5913,5916,5918,5921,5922,5924,
show less
Blocked by OPNsense firewall; 27 hits, proto=tcp, ports=5902,5904,5915,5917,5928,5930,5934,5935,5949 ...
show moreBlocked by OPNsense firewall; 27 hits, proto=tcp, ports=5902,5904,5915,5917,5928,5930,5934,5935,5949,5951,5953,5957,
show less
Blocked by UFW (TCP on 5948)
Source port: 61000
TTL: 238
Packet length: 44
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 5948)
Source port: 61000
TTL: 238
Packet length: 44
TOS: 0x00
This report (for 195.254.165.248) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Showing 1 to
15
of 19 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩