158.94.208.2
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- MGN TEKNOLOJI ANONIM SIRKETI
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS6461
- Domain Name
- mgnteknoloji.com.tr
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
No reports in the last 60 days
158.94.208.2 has been reported 11 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
11 from
11 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇦 Ashgrinder_00013 |
inout; Ports: *; Direction: 1; Trigger: (Web_Vulnerability_Scan) LABEL: Web_Vulnerability_Scan | DESC: ALERT:_Bot_scanning_for_web_vulnerabilities_on_Port_443 158.94.208.2 (DE/Germany/-): 1 in the last 3600 secs; Logs:
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/158.94.208.2
|
Brute-Force | |
| 🇺🇸 NetGuard |
🚨 CRITICAL: Real-time threat on Cowrie | unknown | Port 23 | PhantomGrid Real-time Defense
|
Brute-Force SSH | |
| 🇺🇸 sashan |
2026-01-19T22:10:13.468156+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=158.94.208.2 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=49467 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| Anonymous |
Unauthorized connection attempt on Port 23
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Unauthorized connection to Telnet port 23
|
Port Scan | |
| 🇦🇹 begou.dev |
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/23
|
Port Scan | |
| 🇹🇼 kk_it_man |
honey catch
|
Port Scan | |
| 🇬🇧 essinghigh |
IPS Detection: 158.94.208.2 -> DPT: 23
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked 21 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible.
|
Email Spam |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown