147.161.246.248
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Zscaler Zurich
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS62044
- Domain Name
- zscaler.com
- Country
- 🇨🇭 Switzerland
- City
- Zurich, Zurich
Abuse Reports
Total reports
55 from
37 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 openstrike.co.uk |
17 packets to ports 465 587
|
Brute-Force | |
| 🇿🇦 maximonline.co.za |
Brute Force SMTP AUTH Attack
|
Brute-Force | |
| 🇧🇬 sanitariu |
Nov 6 23:47:49 dri postfix/smtpd[3178228]: warning: unknown[147.161.246.248]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=nasko
...
|
Brute-Force | |
| 🇭🇺 Lacika555 |
RdpGuard detected brute-force attempt on SMTP
|
Brute-Force | |
| 🇩🇪 LRob |
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 | 2026-11-06 17:56 UTC
|
Bad Web Bot | |
| 🇳🇱 Site.eu |
Web shell access (POST to a PHP file in wp-includes or wp-content/uploads)
|
Hacking Web App Attack | |
| 🇬🇧 Aetherweb Ark |
(mod_security) mod_security (id:35002) triggered by 147.161.246.248 (CH/Switzerland/-): N in the last X secs
|
Web App Attack | |
| 🇮🇩 xveil |
2026-11-06T13:12:06.765952 mail-honeypot postfix/submission/smtpd[832]: warning: unknown[147.161.246.248]: SASL PLAIN authentication failed: authentication failure
...
|
Brute-Force | |
| 🇨🇿 lp |
Email account brute force: 1 attempts were recorded from 147.161.246.248
2026-11-06T06:44:52+0100 warning: unknown[147.161.246.248]: SASL authentication failed
|
Brute-Force | |
| 🇮🇩 aaKenshin |
|
Brute-Force | |
| 🇮🇹 Inartis |
Nov 5 23:31:58 mail1 postfix/smtpd[1440321]: warning: unknown[147.161.246.248]: SASL PLAIN authentication failed: authentication failure, [email protected]
...
|
Port Scan Brute-Force | |
| Anonymous |
Automated report: web attack blocked by our WAF honeypot. rule=block-oast-callbacks; time=2026-11-05T20:09:03Z; method=POST; target=cryptorefills.com
|
Web App Attack Hacking | |
| Anonymous |
Authentication failure
|
Brute-Force | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-05 UTC.
|
Hacking | |
| 🇨🇦 Mediashaker |
(smtpauth) Failed SMTP AUTH login from 147.161.246.248 (CH/Switzerland/-)
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown