65.108.198.248

Classification: Malicious

65.108.198.248 is a malicious IP address. Reported by 5 threat sources, last seen 2026-09-13. Network: AS24940 Hetzner Online GmbH.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2026-06-04 16:01:36 2026-09-13 16:22:32 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-04 16:26:18 2026-09-11 16:25:11 attacker malicious-activity
HTTP Scrapper AbuseIPDB 2025-05-01 09:00:21 2026-09-04 07:25:18 anomalous-activity attacker malicious-activity
HTTP Attacker AbuseIPDB 2025-05-01 05:12:07 2026-09-04 07:25:18 attacker malicious-activity
Malicious Host AbuseIPDB 2025-05-03 08:49:13 2026-08-27 01:49:19 attacker compromised malicious-activity
Bruteforce AbuseIPDB 2025-05-01 05:41:13 2026-08-26 21:14:45 attacker malicious-activity
Hacking AbuseIPDB 2025-05-01 05:12:07 2026-08-25 06:00:06 attacker malicious-activity
SSH Attacker AbuseIPDB 2025-05-01 05:41:13 2026-08-19 23:58:52 attacker malicious-activity
Port Scanner AbuseIPDB 2025-05-01 23:51:23 2026-06-28 02:38:13 anomalous-activity attacker
Suspicious Host AbuseIPDB 2025-01-14 21:05:25 2026-06-03 15:51:10 anomalous-activity
Bruteforce login attacker Blocklist.de 2025-01-19 11:06:35 2025-08-14 07:37:39 malicious-activity
HTTP Attacker Blocklist.de 2025-01-19 10:18:37 2025-08-14 06:59:52 malicious-activity
Parasite traffic on site asd2-3.com. Blocklist.net.ua 2025-08-11 10:18:51 2025-08-11 10:18:51 malicious-activity
HTTP Spammer StopForumSpam.com 2025-05-19 11:02:30 2025-07-28 01:12:21 malicious-activity
VPN IPWhois.io 2025-05-07 03:23:55 2025-06-14 20:08:09 anonymization

Tags

apache ddos rfi attacker login bruteforce bot joomla wordpress abuse

Whois information

AS name
AS24940 Hetzner Online GmbH
AS registry
ripencc
AS date
2001-02-09 00:00:00
AS CIDR
65.108.0.0/16
Registrant
Hetzner Online GmbH
City
Helsinki
Postal code
00761
Country
FI — Finland 🇫🇮
First indexed
2025-01-15 09:12:06
Last updated
2026-09-13 16:22:32

Malicious IPs in the same CIDR

65.108.156.99 65.108.159.129 65.108.198.248 65.108.239.60 65.108.1.122 65.108.99.126 65.108.13.173 65.108.120.25 65.108.11.163 65.108.203.35 65.108.233.166 65.108.78.33 65.108.125.120 65.108.214.201 65.108.57.101 65.108.249.14 65.108.85.225 65.108.81.45 65.108.136.190 65.108.2.171 65.108.129.218 65.108.204.82 65.108.239.102 65.108.44.168 65.108.238.107