37.49.228.162

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
73 reports
48 reporters · latest 31 minutes ago
ISP
ESTOXY OU
Usage Type
Data Center/Web Hosting/Transit
ASN
AS61254
Domain Name
estoxy.com
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
73 from 48 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 17 🇩🇪 Germany 16 🇺🇸 United States of America 10
Most common categories Port Scan 54 Hacking 20 Fraud VoIP 14 Brute-Force 12 DDoS Attack 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Scheerer Logistik GmbH & Co KG
Port Scan
🇮🇹 matthew_eli
Keenetic Firewall: Persistent traffic from Blacklisted IP. Blocked via Kernel/NFLOG. (39 hits in 24h).
Port Scan
🇩🇪 iNetWorker
Port Scan
🇳🇱 376yqrz3a
Blocked by os-abuseipdb; 39 hits, proto=udp, ports=5061,5062,5063,5064,5065,5066,5067,5068,5069,5070,5071,5072,
Port Scan Hacking
🇫🇷 ipfyx
Port scanning
Port Scan
🇩🇪 ITSNF
Blocked by os-abuseipdb; 39 hits, proto=udp, ports=5061,5062,5063,5064,5065,5066,5067,5068,5069,5070,5071,5072,
Port Scan Hacking
🇩🇪 mueller-nils.com
Nov 6 23:55:40 [host] kernel: [1297576.183598] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=37.49.228.162 DST=[munged] LEN=405 TOS=0x00 PREC=0x00 TTL=51 ID=64185 PROTO=UDP SPT=10026 DPT=5062 LEN=385 Nov 6 23:55:40 [host] kernel: [1297576.183607] [UFW BLOCK] I
Port Scan
🇹🇷 SeczarSecureOps
Auto-blocked by Seczar SecureOps — Port Scan Detection (39 events in 10min) at 2026-11-06 22:08
Port Scan
🇹🇷 SeczarSecureOps
Auto-blocked by Seczar SecureOps — Port Scan Detection (78 events in 10min) at 2026-11-06 20:39
Port Scan
🇫🇷 ipfyx
Port scanning
Port Scan
🇩🇪 KPS
PortscanM
Port Scan
🇬🇧 myintarweb
<sip:[email protected]:5060>;tag=t160950587
Fraud VoIP
🇫🇷 uthul
T-Pot honeypot: 5 hits on ports [5060] (automated)
Port Scan Hacking
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact
Hacking
🇫🇮 dnsbd.tech
nftables: Port scan (UDP:5060) [srv2]
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 194.180.49.38
🇩🇿 154.245.38.12
🇨🇳 117.191.83.250
🇳🇱 74.116.33.156
🇺🇸 45.33.70.184
🇺🇸 20.3.253.156
🇷🇴 193.46.255.86
🇺🇸 192.253.209.30
🇳🇱 176.65.148.136
🇬🇧 85.203.46.129
🇬🇧 80.40.78.191
🇮🇳 49.204.153.34
🇳🇱 45.148.10.157
🇫🇮 45.147.10.11
🇬🇧 35.203.211.92
🇺🇸 23.185.120.217
🇺🇸 20.118.242.81
🇷🇴 2.57.122.150
🇨🇳 222.218.90.197
🇺🇸 172.68.245.92
feedback