AbuseIPDB » 5.248.1.195

Check an IP Address, Domain Name, or Subnet

e.g. 54.85.57.0, microsoft.com, or 5.188.10.0/24

5.248.1.195 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 43%: ?

43%

ISP	Kyivstar PJSC
Usage Type	Unknown
Hostname(s)	5-248-1-195.broadband.kyivstar.net
Domain Name	kyivstar.ua
Country	Ukraine
City	Kiev, Kyiv

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 5.248.1.195

Whois 5.248.1.195

IP Abuse Reports for 5.248.1.195:

This IP address has been reported a total of 9 times from 6 distinct sources. 5.248.1.195 was first reported on January 8th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
vassagoconsultancy	21 Jan 2021	Jan 21 18:32:01 lunarastro sshd[7160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreJan 21 18:32:01 lunarastro sshd[7160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.248.1.195 Jan 21 18:32:03 lunarastro sshd[7160]: Failed password for invalid user admin from 5.248.1.195 port 55434 ssh2 show less	Brute-Force SSH
vassagoconsultancy	19 Jan 2021	Jan 19 23:30:40 lunarastro sshd[30179]: Failed password for root from 5.248.1.195 port 59482 ssh2	Brute-Force SSH
mbluthardt.naksued	18 Jan 2021	Jan 19 04:00:10 nextcloud sshd\[24741\]: Invalid user guest from 5.248.1.195 Jan 19 04:00:10 n ... show moreJan 19 04:00:10 nextcloud sshd\[24741\]: Invalid user guest from 5.248.1.195 Jan 19 04:00:10 nextcloud sshd\[24741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.248.1.195 Jan 19 04:00:11 nextcloud sshd\[24741\]: Failed password for invalid user guest from 5.248.1.195 port 47622 ssh2 show less	Brute-Force SSH
www.blocklist.de	17 Jan 2021	Lines containing failures of 5.248.1.195 Jan 17 07:03:26 mx-in-01 sshd[29891]: pam_unix(sshd:a ... show moreLines containing failures of 5.248.1.195 Jan 17 07:03:26 mx-in-01 sshd[29891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.248.1.195 user=r.r Jan 17 07:03:27 mx-in-01 sshd[29891]: Failed password for r.r from 5.248.1.195 port 52744 ssh2 Jan 17 07:03:29 mx-in-01 sshd[29891]: Connection closed by authenticating user r.r 5.248.1.195 port 52744 [preauth] Jan 17 16:00:47 mx-in-01 sshd[17499]: Invalid user guest from 5.248.1.195 port 35396 Jan 17 16:00:47 mx-in-01 sshd[17499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.248.1.195 Jan 17 16:00:50 mx-in-01 sshd[17499]: Failed password for invalid user guest from 5.248.1.195 port 35396 ssh2 Jan 17 16:00:50 mx-in-01 sshd[17499]: Connection closed by invalid user guest 5.248.1.195 port 35396 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=5.248.1.195 show less	FTP Brute-Force Hacking
vassagoconsultancy	13 Jan 2021	Jan 13 21:31:16 lunarastro sshd[27100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreJan 13 21:31:16 lunarastro sshd[27100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.248.1.195 Jan 13 21:31:18 lunarastro sshd[27100]: Failed password for invalid user admin from 5.248.1.195 port 40591 ssh2 show less	Brute-Force SSH
32bitbradley	13 Jan 2021	Connection to SSH Honeypot - Detected by HoneypotDB	SSH
OiledAmoeba	12 Jan 2021	Jan 13 05:00:25 fhem-rasp sshd[27609]: Did not receive identification string from 5.248.1.195 port 4 ... show moreJan 13 05:00:25 fhem-rasp sshd[27609]: Did not receive identification string from 5.248.1.195 port 41460 ... show less	Brute-Force SSH
OiledAmoeba	09 Jan 2021	Jan 9 20:00:38 fhem-rasp sshd[29331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreJan 9 20:00:38 fhem-rasp sshd[29331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.248.1.195 user=root Jan 9 20:00:39 fhem-rasp sshd[29331]: Failed password for root from 5.248.1.195 port 49944 ssh2 ... show less	Brute-Force SSH
gjan.info	08 Jan 2021	Auto Detect Rule! proto TCP (SYN), 5.248.1.195:45507->gjan.info:22, len 60	Port Scan