JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

115.238.249.28

Recent Activity

Abuse confidence score ?

100% Critical

175 reports

140 reporters · latest 52 minutes ago

ISP	Zhzty-Coltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136190
Domain Name	hz.zj.cn
Country	🇨🇳 China
City	Shaoxing, Zhejiang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 115.238.249.28

This IP address has been reported a total of 175 times from 140 distinct sources. 115.238.249.28 was first reported on July 5th 2026, and the most recent report was 52 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 38 reports; Germany with 31 reports; Netherlands with 15 reports. The most common categories in these recent reports were: SSH 132 times; Brute-Force 128 times; Port Scan 26 times; Hacking 7 times; Exploited Host 2 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 lns.bz	2026-09-25 06:53:08 (52 minutes ago)	SSH bruteforce [BY]	SSH
🇺🇸 CGT Software Webmaster	2026-09-25 06:12:59 (1 hour ago)	2026-09-25T14:12:54.782670+08:00 CVM24121 sshd[77293]: Failed password for root from 115.238.249.28 ... show more 2026-09-25T14:12:54.782670+08:00 CVM24121 sshd[77293]: Failed password for root from 115.238.249.28 port 36870 ssh2 2026-09-25T14:12:56.979539+08:00 CVM24121 sshd[77295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.249.28 user=root 2026-09-25T14:12:58.629108+08:00 CVM24121 sshd[77295]: Failed password for root from 115.238.249.28 port 44690 ssh2 ... show less	Port Scan Brute-Force
🇫🇷 applemooz	2026-09-25 05:06:38 (2 hours ago)	Sep 25 07:06:26 lnxmail62 sshd[1821135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Sep 25 07:06:26 lnxmail62 sshd[1821135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.249.28 user=root Sep 25 07:06:28 lnxmail62 sshd[1821135]: Failed password for root from 115.238.249.28 port 55140 ssh2 Sep 25 07:06:31 lnxmail62 sshd[1826062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.249.28 user=root Sep 25 07:06:33 lnxmail62 sshd[1826062]: Failed password for root from 115.238.249.28 port 41460 ssh2 Sep 25 07:06:36 lnxmail62 sshd[1827131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.249.28 user=root ... show less	Brute-Force SSH
🇩🇪 DEV-DNS	2026-09-25 04:56:23 (2 hours ago)	(sshd) Failed SSH login from 115.238.249.28 (CN/China/-/-/-/[redacted])	Brute-Force SSH
🇺🇸 onemightyarc	2026-09-25 04:56:14 (2 hours ago)	2026-09-24T21:56:10.146889-07:00 server.vexstria.pro sshd[2655052]: Failed password for root from 11 ... show more 2026-09-24T21:56:10.146889-07:00 server.vexstria.pro sshd[2655052]: Failed password for root from 115.238.249.28 port 41078 ssh2 2026-09-24T21:56:11.919143-07:00 server.vexstria.pro sshd[2656890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.249.28 user=root 2026-09-24T21:56:13.719874-07:00 server.vexstria.pro sshd[2656890]: Failed password for root from 115.238.249.28 port 37498 ssh2 ... show less	Brute-Force SSH Port Scan FTP Brute-Force
🇿🇦 voolik.com	2026-09-25 04:14:38 (3 hours ago)	2026-09-25T06:14:18.716134+02:00 bla016-truserv-jhb1-001 sshd[770228]: refused connect from 115.238. ... show more 2026-09-25T06:14:18.716134+02:00 bla016-truserv-jhb1-001 sshd[770228]: refused connect from 115.238.249.28 (115.238.249.28) 2026-09-25T06:14:24.331030+02:00 bla016-truserv-jhb1-001 sshd[770495]: refused connect from 115.238.249.28 (115.238.249.28) 2026-09-25T06:14:31.144794+02:00 bla016-truserv-jhb1-001 sshd[770982]: refused connect from 115.238.249.28 (115.238.249.28) 2026-09-25T06:14:36.906976+02:00 bla016-truserv-jhb1-001 sshd[771204]: refused connect from 115.238.249.28 (115.238.249.28) ... show less	Brute-Force SSH
🇩🇪 gnomechompski	2026-09-25 04:01:09 (3 hours ago)	2026-09-25T03:51:27.245597+00:00 vps1.gnome.moe sshd-session[851525]: Failed password for root from ... show more 2026-09-25T03:51:27.245597+00:00 vps1.gnome.moe sshd-session[851525]: Failed password for root from 115.238.249.28 port 55800 ssh2 2026-09-25T03:51:31.290221+00:00 vps1.gnome.moe sshd-session[851785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.249.28 user=root 2026-09-25T03:51:33.787216+00:00 vps1.gnome.moe sshd-session[851785]: Failed password for root from 115.238.249.28 port 38362 ssh2 2026-09-25T04:01:06.597057+00:00 vps1.gnome.moe sshd-session[857267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.249.28 user=root 2026-09-25T04:01:08.881268+00:00 vps1.gnome.moe sshd-session[857267]: Failed password for root from 115.238.249.28 port 39002 ssh2 ... show less	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-09-25 03:36:05 (4 hours ago)	Sep 25 05:35:56 pegasus sshd[1572107]: Failed password for root from 115.238.249.28 port 50724 ssh2 ... show more Sep 25 05:35:56 pegasus sshd[1572107]: Failed password for root from 115.238.249.28 port 50724 ssh2 Sep 25 05:35:59 pegasus sshd[1572113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.249.28 user=root Sep 25 05:36:01 pegasus sshd[1572113]: Failed password for root from 115.238.249.28 port 34032 ssh2 Sep 25 05:36:04 pegasus sshd[1572166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.249.28 user=root Sep 25 05:36:05 pegasus sshd[1572166]: Failed password for root from 115.238.249.28 port 47256 ssh2 show less	Brute-Force SSH
🇩🇪 Sequell.de	2026-09-25 03:23:15 (4 hours ago)	SSH brute-force attempt (Username: root)	Brute-Force SSH
🇩🇪 genclikfederasyonu.org	2026-09-25 02:46:27 (4 hours ago)	fail2banned (ssh brute)	Brute-Force SSH
🇧🇷 noconex	2026-09-25 02:39:11 (5 hours ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 115.238.24 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 115.238.249.28 show less	Port Scan Brute-Force SSH
🇩🇪 Kejult	2026-09-24 23:53:05 (7 hours ago)	Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ... show more Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed. show less	Hacking SSH
🇳🇱 itscris	2026-09-24 23:24:12 (8 hours ago)	Fail2Ban ban: jail=sshd	Brute-Force SSH
🇫🇷 sthoyer.de	2026-09-24 22:50:46 (8 hours ago)	Sep 25 00:50:46 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Sep 25 00:50:46 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=115.238.249.28 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=33027 DF PROTO=TCP SPT=40222 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 NetVexor	2026-09-24 22:47:46 (8 hours ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force

Showing 1 to 15 of 175 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.124.20.253

🇬🇧 193.32.209.241

🇬🇧 118.193.64.15

🇷🇺 95.52.45.215

🇸🇬 212.73.148.10

🇨🇳 120.27.151.136

🇺🇸 72.63.189.128

🇦🇷 45.172.109.95

🇹🇼 34.81.199.83

🇧🇷 205.210.31.252

🇺🇸 172.59.75.196

🇺🇸 162.216.150.219

🇰🇷 118.37.214.187

🇭🇰 118.26.37.105

🇨🇳 117.80.87.254

🇮🇳 103.183.83.105

🇧🇩 103.171.69.190

🇮🇳 103.158.138.179

🇷🇴 80.94.92.237

🇺🇸 66.132.172.152