Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
This IP address has been reported a total of
30
times from
24 distinct
sources.
216.25.90.92 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 7
reports;
Germany
with 4
reports;
United Kingdom of Great Britain and Northern Ireland
with 3
reports.
The most common categories in these recent reports were:
Port Scan
28
times;
Hacking
7
times;
Brute-Force
3
times;
Bad Web Bot
2
times;
DDoS Attack
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated scan detection against redacted protected targets. Hits=1; port 8880 proto 6 detection dar ...
show moreAutomated scan detection against redacted protected targets. Hits=1; port 8880 proto 6 detection dark_ip
show less
Blocked by UFW (TCP on 5908)
Source port: 55062
TTL: 251
Packet length: 44
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 5908)
Source port: 55062
TTL: 251
Packet length: 44
TOS: 0x00
This report (for 216.25.90.92) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 2484)
Source port: 53681
TTL: 251
Packet length: 44
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 2484)
Source port: 53681
TTL: 251
Packet length: 44
TOS: 0x00
This report (for 216.25.90.92) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Repeated unauthorized connection attempts to restricted service observed.
2026-10-27T16:30:31.652796+00:00 Debian sshd-session[3522508]: Unable to negotiate with 216.25.90.92 ...
show more2026-10-27T16:30:31.652796+00:00 Debian sshd-session[3522508]: Unable to negotiate with 216.25.90.92 port 59212: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
show less
Blocked by UFW (TCP on 31337)
Source port: 53301
TTL: 251
Packet length: 44
TOS: 0x00
This report ( ...
show moreBlocked by UFW (TCP on 31337)
Source port: 53301
TTL: 251
Packet length: 44
TOS: 0x00
This report (for 216.25.90.92) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on port 26900).
Source port: 51731
TTL: 250
Packet length: 44
TOS: 0x00
This re ...
show moreBlocked by UFW (TCP on port 26900).
Source port: 51731
TTL: 250
Packet length: 44
TOS: 0x00
This report (for 216.25.90.92) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 8081)
Source port: 50530
TTL: 251
Packet length: 44
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 8081)
Source port: 50530
TTL: 251
Packet length: 44
TOS: 0x00
This report (for 216.25.90.92) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Honeypot detection: port scan / service probe. 3 events observed. Reported automatically from a hone ...
show moreHoneypot detection: port scan / service probe. 3 events observed. Reported automatically from a honeypot sensor.
show less
