181.58.70.249

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
334 reports
157 reporters · latest 1 hour ago
ISP
Telmex Colombia S.A.
Usage Type
Fixed Line ISP
ASN
AS10620
Hostname(s)
static-ip-1815870249.cable.net.co
Domain Name
telmexla.net.co
Country
🇨🇴 Colombia
City
Barrancabermeja, Santander Department
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
334 from 157 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 95 🇺🇸 United States of America 34 🇫🇷 France 27
Most common categories Brute-Force 296 Email Spam 45 Hacking 38 Port Scan 26 Exploited Host 14
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 EGP Abuse Dept
SMTP AUTH attack
Brute-Force
🇩🇪 vcis.de
SMTP brute force attack detected from [181.58.70.249]
Brute-Force
🇩🇪 itak
SMTP SASL Brute-Force Attack
Port Scan Hacking Brute-Force
🇵🇱 ZiBoTo
Nov 7 05:55:54 lawenda postfix/smtpd[13102]: warning: unknown[181.58.70.249]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ...
Brute-Force
Anonymous
$f2bV_matches
Brute-Force
Anonymous
Port scanning: unknown[181.58.70.249] unknown[181.58.70.249] unknown[181.58.70.249]
Brute-Force
🇩🇪 Sparxx
Brute-Force
🇩🇰 powerhostingdk
[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report.
Brute-Force
🇭🇺 Lacika555
RdpGuard detected brute-force attempt on SMTP
Brute-Force
🇩🇪 MarkGGN
SMTP Bruteforce. 2026-11-07T00:46:57.383011+01:00 [HOST] postfix/smtpd[1260776]: warning: unknown[181.58.70.249]: SASL PLAIN authentication failed: authentication failure, sasl_username=cologne@[HOST]
Brute-Force
🇩🇪 DAUGDE
2026-11-07T00:14:32.093031+01:00 v2202104133598150667 fa2d889f15bf[1532965]: Nov 7 00:14:32 fa2d889f15bf postfix/smtps/smtpd[19684]: warning: unknown[181.58.70.249]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=ie0214 ...
Email Spam Spoofing Brute-Force
Anonymous
Blocked by firewall on hugin [587/tcp] | Rule: AbuseIPDB | SPT: 50152 | TTL: 53 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Email Spam
🇺🇸 entangled_mongoose
Failed IMAP authentication with username 'user_sha_857bc@domain_sha_1c064'.
Brute-Force Hacking
🇩🇪 www.fransveldman.world
Nov 6 21:40:55 mail postfix/submission/smtpd[1858273]: warning: unknown[181.58.70.249]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 21:40:55 mail postfix/submission/smtpd[1858273]: lost connection after AUTH from unknown[181.58.70.249] ...
Brute-Force Email Spam
🇫🇷 Kejult
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
Hacking SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.78.186.58
🇵🇱 193.31.76.138
🇳🇱 185.218.86.13
🇨🇦 174.94.236.211
🇺🇸 129.213.151.234
🇵🇱 109.196.38.255
🇫🇷 91.231.89.150
🇺🇸 83.142.54.141
🇳🇵 27.34.111.168
🇬🇧 5.226.140.65
🇳🇱 193.47.62.110
🇮🇩 182.10.101.224
🇳🇱 128.90.128.20
🇰🇷 125.246.95.152
🇭🇰 123.58.219.129
🇺🇸 68.83.114.6
🇺🇸 65.49.1.222
🇺🇸 45.58.52.17
🇸🇬 43.134.15.174
🇺🇸 20.96.179.87
feedback