217.248.15.149

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
33% Elevated
14 reports
12 reporters · latest 2 weeks ago
ISP
Deutsche Telekom AG
Usage Type
Fixed Line ISP
ASN
AS3320
Hostname(s)
pd9f80f95.dip0.t-ipconnect.de
Domain Name
telekom.de
Country
🇩🇪 Germany
City
Essen, North Rhine-Westphalia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
14 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇭🇰 Hong Kong 2 🇭🇺 Hungary 2
Most common categories Brute-Force 11 Web App Attack 5 Hacking 2 SSH 2 Port Scan 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇭🇺 kisbogdan
Synology DSM login bruteforce; Requests: 74; Avg time between requests: 397.56 seconds; Attempted usernames: vinay, dhaval, bhavin, edp, ashok, support2, dean, jayne, sonya, manager
Brute-Force
Anonymous
Web directory scan: 10 requests in 3h 31m (Last path: '/webapi/auth.cgi?account=ashok&api=SYNO.API.Auth&format=sid&method=login&passwd=1234&session=FileStation&version=6').
Hacking Web App Attack
🇵🇱 krzepa
Automated block by Synology DSM AutoBlock
Brute-Force SSH
🇭🇺 kisbogdan
Synology DSM login bruteforce; Requests: 6; Avg time between requests: 200.20 seconds; Attempted usernames: vinay
Brute-Force
🇦🇺 Hacker Reporter
Synology DSM web login brute-force: 11 failed password sign-in attempts between 2026-10-06T22:31:58+11:00 and 2026-10-07T03:17:01+11:00 using 6 different usernames (taufik, qiudan, raymond, konrad, grupposis, easylog).
Brute-Force Web App Attack
🇩🇪 sstrack74Abuse
Synology DSM web login brute-force: 9 failed sign-in attempt(s) between 09:35:41 and 17:58:56 CEST on 2026-10-06; part of distributed low-and-slow campaign (1000+ IPs).
Brute-Force Web App Attack
🇨🇭 Philippus
Brute-force login attempts, auto-blocked by Synology DSM
Brute-Force
Anonymous
Web directory scan: 10 requests in 4h 39m (Last path: '/webapi/auth.cgi?account=grupposis&api=SYNO.API.Auth&format=sid&method=login&passwd=Qwer1234&session=FileStation&version=6').
Hacking Web App Attack
🇸🇬 Lap Scan
Automated brute-force authentication attempt against Synology DSM management portal. Blocked by autoblock.
Brute-Force SSH
🇸🇪 Sria Iria
Synology DSM: 1 failed password login. Authorization failure recorded in DSM connection logs.
Brute-Force
🇺🇸 plezzz
217.248.15.149 attempting to log in to DSM and was blocked at 06.10.2026 10:49
Brute-Force
🇩🇪 Ivan Ivanov
Global Docker honeypot port trap
Port Scan
🇫🇷 TomX
Automated brute-force attack detected on Synology DSM web interface.
Brute-Force
🇵🇱 jrgjon
Automated brute-force authentication attempt against Synology DSM management portal. Blocked by autoblock.
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇭 154.18.197.35
🇹🇷 102.135.106.121
🇬🇧 92.207.4.157
🇧🇪 35.206.173.86
🇧🇷 179.60.143.153
🇦🇴 154.116.254.157
🇦🇷 148.227.74.75
🇳🇱 91.148.244.131
🇧🇬 91.92.199.36
🇦🇪 20.74.254.174
🇳🇱 193.47.62.69
🇬🇧 161.35.171.196
🇮🇳 152.52.15.213
🇫🇷 91.231.89.255
🇺🇸 72.63.208.228
🇸🇬 58.182.11.140
🇻🇳 45.121.25.115
🇷🇴 2.57.122.150
🇺🇸 195.184.76.181
🇮🇷 188.210.84.1
feedback