JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

161.248.178.228

Neutral Activity

Abuse Confidence Score

0% Low Risk

278 reports

93 reporters · latest 6 months ago

ISP: CAO GIA NANOMEDECINE TECHNOLOGY JOINT STOCK COMPANY
Usage Type: Data Center/Web Hosting/Transit
ASN: AS150895
Domain Name: vpscaogia.io.vn
Country: 🇻🇳 Viet Nam
City: Ho Chi Minh City, Ho Chi Minh City (HCMC)

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

161.248.178.228 has been reported 278 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

278 from 93 distinct reporters

First reported

August 8th 2025

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-05 06:00:00 UTC · (6 months ago)	Confirmed malicious by STILWaters CTI platform (score=86, sources=1)	Hacking Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-04-06 22:28:58 UTC · (7 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-04-04 22:33:47 UTC · (7 months ago)		Brute-Force Web App Attack
Anonymous	2026-04-01 06:20:49 UTC · (7 months ago)	Dispatching spam/unsolicited email	Email Spam
🇩🇪 kreativstrecke	2026-04-01 03:36:27 UTC · (7 months ago)	2026-04-01T05:36:25.576177+02:00 srv02 postfix/postscreen[3011875]: PREGREET 16 after 0.16 from [161.248.178.228]:62246: EHLO QiQu0NKRl\r\n 2026-04-01T05:36:25.971080+02:00 srv02 postfix/postscreen[3011875]: HANGUP after 0.33 from [161.248.178.228]:6 ... show more 2026-04-01T05:36:25.576177+02:00 srv02 postfix/postscreen[3011875]: PREGREET 16 after 0.16 from [161.248.178.228]:62246: EHLO QiQu0NKRl\r\n 2026-04-01T05:36:25.971080+02:00 srv02 postfix/postscreen[3011875]: HANGUP after 0.33 from [161.248.178.228]:62246 in tests after SMTP handshake 2026-04-01T05:36:26.298999+02:00 srv02 postfix/postscreen[3011875]: PREGREET 16 after 0.16 from [161.248.178.228]:62294: EHLO yFUATqvM0\r\n ... show less	Brute-Force
🇩🇪 icera-network.de	2026-04-01 00:27:17 UTC · (7 months ago)	Apr 1 02:27:15 mail postfix/smtpd[2840996]: disconnect from unknown[161.248.178.228] ehlo=1 auth=0/1 commands=1/2 Apr 1 02:27:16 mail postfix/smtpd[2840996]: lost connection after AUTH from unknown[161.248.178.228] Apr 1 02:27:16 mail postfix/smtp ... show more Apr 1 02:27:15 mail postfix/smtpd[2840996]: disconnect from unknown[161.248.178.228] ehlo=1 auth=0/1 commands=1/2 Apr 1 02:27:16 mail postfix/smtpd[2840996]: lost connection after AUTH from unknown[161.248.178.228] Apr 1 02:27:16 mail postfix/smtpd[2840996]: disconnect from unknown[161.248.178.228] ehlo=1 auth=0/1 commands=1/2 Apr 1 02:27:17 mail postfix/smtpd[2840996]: lost connection after AUTH from unknown[161.248.178.228] Apr 1 02:27:17 mail postfix/smtpd[2840996]: disconnect from unknown[161.248.178.228] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇩🇪 jasperedv.de	2026-04-01 00:11:45 UTC · (7 months ago)	Failed SMTP Login - Brutforcing	Email Spam Brute-Force
🇩🇪 XICTRON	2026-03-31 22:05:04 UTC · (7 months ago)	SMTP brute-force attempt detected by Fail2Ban in Postfix jail	Brute-Force
🇩🇪 ipcop.net	2026-03-31 21:43:33 UTC · (7 months ago)	2026-03-31T22:43:26.772216+01:00 mail.srvfarm.net postfix/smtpd[1114455]: disconnect from unknown[161.248.178.228] ehlo=1 auth=0/1 commands=1/2 2026-03-31T22:43:27.658393+01:00 mail.srvfarm.net postfix/smtpd[1114455]: disconnect from unknown[161.248. ... show more 2026-03-31T22:43:26.772216+01:00 mail.srvfarm.net postfix/smtpd[1114455]: disconnect from unknown[161.248.178.228] ehlo=1 auth=0/1 commands=1/2 2026-03-31T22:43:27.658393+01:00 mail.srvfarm.net postfix/smtpd[1114455]: disconnect from unknown[161.248.178.228] ehlo=1 auth=0/1 commands=1/2 2026-03-31T22:43:28.568816+01:00 mail.srvfarm.net postfix/smtpd[1114455]: disconnect from unknown[161.248.178.228] ehlo=1 auth=0/1 commands=1/2 2026-03-31T22:43:29.447405+01:00 mail.srvfarm.net postfix/smtpd[1114455]: disconnect from unknown[161.248.178.228] ehlo=1 auth=0/1 commands=1/2 2026-03-31T22:43:32.199090+01:00 mail.srvfarm.net postfix/smtpd[1114455]: disconnect from unknown[161.248.178.228] ehlo=1 auth=0/1 commands=1/2 show less	Fraud VoIP Brute-Force
🇩🇪 todix	2026-03-31 19:44:12 UTC · (7 months ago)	SASL LOGIN authentication failed on postfix/smtpd from 161.248.178.228	Brute-Force
🇩🇪 DennisE	2026-03-31 19:26:21 UTC · (7 months ago)	Mar 31 21:26:16 mkhserver1 postfix/smtpd\[30950\]: warning: unknown\[161.248.178.228\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6Mar 31 21:26:23 mkhserver1 postfix/smtpd\[30950\]: warning: unknown\[161.248.178.228\]: SASL LOGIN authentication fa ... show more Mar 31 21:26:16 mkhserver1 postfix/smtpd\[30950\]: warning: unknown\[161.248.178.228\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6Mar 31 21:26:23 mkhserver1 postfix/smtpd\[30950\]: warning: unknown\[161.248.178.228\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force Exploited Host
🇩🇪 akasolutions.de	2026-03-31 18:02:04 UTC · (7 months ago)	(smtpauth) Failed SMTP AUTH login from 161.248.178.228 (VN/Vietnam/-)	Brute-Force
🇩🇪 DEV-DNS	2026-03-31 17:35:56 UTC · (7 months ago)	(smtpauth) Failed SMTP AUTH login from 161.248.178.228 (VN/Vietnam/-/-/-/[redacted])	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-31 17:09:47 UTC · (7 months ago)	Mar 31 19:09:43 pegasus postfix/smtpd[2008308]: warning: unknown[161.248.178.228]: SASL LOGIN authentication failed: authentication failure, sasl_username=info Mar 31 19:09:45 pegasus postfix/smtpd[1997112]: warning: unknown[161.248.178.228]: SASL LO ... show more Mar 31 19:09:43 pegasus postfix/smtpd[2008308]: warning: unknown[161.248.178.228]: SASL LOGIN authentication failed: authentication failure, sasl_username=info Mar 31 19:09:45 pegasus postfix/smtpd[1997112]: warning: unknown[161.248.178.228]: SASL LOGIN authentication failed: authentication failure, sasl_username=info Mar 31 19:09:46 pegasus postfix/smtpd[2008308]: warning: unknown[161.248.178.228]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Hacking Brute-Force
🇫🇷 SpaceHost-Server	2026-03-31 15:14:20 UTC · (7 months ago)	Mar 31 17:14:16 pegasus postfix/smtpd[1943027]: warning: unknown[161.248.178.228]: SASL LOGIN authentication failed: authentication failure, sasl_username=info Mar 31 17:14:17 pegasus postfix/smtpd[1946886]: warning: unknown[161.248.178.228]: SASL LO ... show more Mar 31 17:14:16 pegasus postfix/smtpd[1943027]: warning: unknown[161.248.178.228]: SASL LOGIN authentication failed: authentication failure, sasl_username=info Mar 31 17:14:17 pegasus postfix/smtpd[1946886]: warning: unknown[161.248.178.228]: SASL LOGIN authentication failed: authentication failure, sasl_username=info Mar 31 17:14:19 pegasus postfix/smtpd[1943027]: warning: unknown[161.248.178.228]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Hacking Brute-Force

Showing 1 to 15 of 278 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇬 193.24.211.206

🇬🇧 185.247.137.95

🇳🇵 182.93.95.214

🇳🇱 176.65.148.51

🇨🇭 170.231.237.214

🇷🇺 109.63.188.201

🇷🇺 109.63.163.163

🇻🇳 103.68.69.15

🇻🇬 103.47.145.87

🇵🇹 95.94.205.12

🇬🇧 87.236.176.75

🇺🇸 71.6.199.23

🇺🇦 37.55.69.98

🇺🇸 35.171.155.224

🇧🇪 34.156.56.208

🇭🇰 34.92.195.102

🇺🇸 20.168.11.43

🇿🇦 16.28.65.178

🇵🇱 194.113.248.221

🇺🇦 185.38.218.3