This IP address has been reported a total of
51
times from
47 distinct
sources.
44.248.161.232 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
44.248.161.232 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time ...
show more44.248.161.232 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time wasted: 1m 31s. Total bytes sent by tarpit: 10.00KiB. Report generated by Endlessh Report Generator v1.2.3
show less
44.248.161.232 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time ...
show more44.248.161.232 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time wasted: 1m 31s. Total bytes sent by tarpit: 10.00KiB. Report generated by Endlessh Report Generator v1.2.3
show less
Unauthorized access to SSH at 18/Jun/2026:10:30:00 +0000.
Received: (SSH-2.0-paramiko_3.4.0)
SSH
Anonymous
2026-06-18T10:29:45.891853+00:00 Canada1 sshd-session[3584419]: Unable to negotiate with 44.248.161. ...
show more2026-06-18T10:29:45.891853+00:00 Canada1 sshd-session[3584419]: Unable to negotiate with 44.248.161.232 port 53772: no matching cipher found. Their offer: aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc [preauth]
2026-06-18T10:29:46.297339+00:00 Canada1 sshd-session[3584708]: Unable to negotiate with 44.248.161.232 port 53788: no matching cipher found. Their offer: aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc [preauth]
...
show less
Jun 18 10:10:06 Ubuntu-2204-jammy-amd64-base sshd[2055928]: Connection closed by 44.248.161.232 port ...
show moreJun 18 10:10:06 Ubuntu-2204-jammy-amd64-base sshd[2055928]: Connection closed by 44.248.161.232 port 60436 [preauth]
...
show less
2026-06-18T10:06:01.315638+00:00 singularity sshd[1898739]: Connection closed by 44.248.161.232 port ...
show more2026-06-18T10:06:01.315638+00:00 singularity sshd[1898739]: Connection closed by 44.248.161.232 port 35990 [preauth]
2026-06-18T10:06:02.269208+00:00 singularity sshd[1898741]: Connection closed by 44.248.161.232 port 36006 [preauth]
2026-06-18T10:06:03.051383+00:00 singularity sshd[1898743]: Unable to negotiate with 44.248.161.232 port 41846: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
Jun 18 10:01:17 sanyalnet-oracle-vps2 sshd[1515117]: Unable to negotiate with 44.248.161.232 port 55 ...
show moreJun 18 10:01:17 sanyalnet-oracle-vps2 sshd[1515117]: Unable to negotiate with 44.248.161.232 port 55356: no matching host key type found. Their offer: ecdsa-sha2-nistp256,[email protected] [preauth]
Jun 18 10:01:17 sanyalnet-oracle-vps2 sshd[1515119]: Connection from 44.248.161.232 port 55364 on 10.0.0.93 port 22 rdomain ""
Jun 18 10:01:17 sanyalnet-oracle-vps2 sshd[1515119]: Unable to negotiate with 44.248.161.232 port 55364: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
2026-06-18T11:54:14.326576+02:00 gw-de10-01.guestgw.net sshd[285258]: Connection closed by 44.248.16 ...
show more2026-06-18T11:54:14.326576+02:00 gw-de10-01.guestgw.net sshd[285258]: Connection closed by 44.248.161.232 port 50752 [preauth]
2026-06-18T11:54:15.341382+02:00 gw-de10-01.guestgw.net sshd[285279]: Connection closed by 44.248.161.232 port 50782 [preauth]
2026-06-18T11:54:16.088424+02:00 gw-de10-01.guestgw.net sshd[285283]: Unable to negotiate with 44.248.161.232 port 50784: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-06-18T11:54:16.955617+02:00 gw-de10-01.guestgw.net sshd[285285]: Unable to negotiate with 44.248.161.232 port 50798: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-06-18T11:54:18.437883+02:00 gw-de10-01.guestgw.net sshd[285294]: Connection closed by 44.248.161.232 port 50826 [preauth]
show less
2026-06-18T11:34:50.558181+02:00 ..de sshd-session[3442617]: Unable to negotiate with 44.248.161.232 ...
show more2026-06-18T11:34:50.558181+02:00 ..de sshd-session[3442617]: Unable to negotiate with 44.248.161.232 port 38562: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-06-18T11:34:51.291521+02:00 ..de sshd-session[3442619]: Unable to negotiate with 44.248.161.232 port 38572: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-06-18T11:34:54.568938+02:00 ..de sshd-session[3442648]: Unable to negotiate with 44.248.161.232 port 38598: no matching host key type found. Their offer: ssh-rsa,[email protected] [preauth]
...
show less
Honeypot [nx-infrastructure]: Unauthorized connection attempt detected on 22/SSH
โข Client: SSH-2.0-p ...
show moreHoneypot [nx-infrastructure]: Unauthorized connection attempt detected on 22/SSH
โข Client: SSH-2.0-paramiko_3.4.0
Reported by: Justin F.
show less
2026-06-18T10:29:45.756365+02:00 asdeby sshd-session[1068578]: Connection closed by 44.248.161.232 p ...
show more2026-06-18T10:29:45.756365+02:00 asdeby sshd-session[1068578]: Connection closed by 44.248.161.232 port 47904 [preauth]
2026-06-18T10:29:46.850295+02:00 asdeby sshd-session[1068584]: Connection closed by 44.248.161.232 port 47914 [preauth]
2026-06-18T10:29:47.536401+02:00 asdeby sshd-session[1068586]: Unable to negotiate with 44.248.161.232 port 47920: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
Fail2Ban automatic report:
SSH brute-force:
Jun 18 10:24:33 serw sshd[1992643]: Connection closed by ...
show moreFail2Ban automatic report:
SSH brute-force:
Jun 18 10:24:33 serw sshd[1992643]: Connection closed by 44.248.161.232 port 60728 [preauth]
Jun 18 10:24:34 serw sshd[1992645]: Connection closed by 44.248.161.232 port 60742 [preauth]
Jun 18 10:24:34 serw sshd[1992647]: Unable to negotiate with 44.248.161.232 port 60758: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
show less
Brute-Force
SSH
Showing 1 to
15
of 51 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ