JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

4.28.195.158

Neutral Activity

Abuse Confidence Score

0% Low Risk

63 reports

45 reporters · latest 10 months ago

ISP: Level 3 Parent, LLC
Usage Type: Fixed Line ISP
ASN: AS3356
Domain Name: lumen.com
Country: 🇺🇸 United States of America
City: Charlotte, North Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

4.28.195.158 has been reported 63 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

63 from 45 distinct reporters

First reported

January 2nd 2026

Most recent report

10 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 zwh	2026-01-04 18:05:12 UTC · (10 months ago)	SSH Brute-Force	Brute-Force SSH
🇳🇱 SchorelWeb	2026-01-04 11:57:03 UTC · (10 months ago)	Cluster member (Omitted) (NL/The Netherlands/-) said, DENY 4.28.195.158, Reason:[(sshd) Failed SSH login from 4.28.195.158 (US/United States/-): 3 in the last 3600 secs]	Brute-Force SSH
🇯🇵 zwh	2026-01-03 18:01:41 UTC · (10 months ago)	SSH Brute-Force	Brute-Force SSH
🇺🇸 bigwavedave	2026-01-03 15:57:03 UTC · (10 months ago)	ssh	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-03 15:54:07 UTC · (10 months ago)	(sshd) Failed SSH login from 4.28.195.158 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 3 15:53:54 24125 sshd[31959]: Did not receive identification string from 4.28.195.158 port 57478 Jan 3 15:53:54 24 ... show more (sshd) Failed SSH login from 4.28.195.158 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 3 15:53:54 24125 sshd[31959]: Did not receive identification string from 4.28.195.158 port 57478 Jan 3 15:53:54 24125 sshd[31960]: Invalid user a from 4.28.195.158 port 57630 Jan 3 15:53:57 24125 sshd[31960]: Failed password for invalid user a from 4.28.195.158 port 57630 ssh2 Jan 3 15:53:57 24125 sshd[31962]: Invalid user nil from 4.28.195.158 port 43370 Jan 3 15:53:57 24125 sshd[31964]: Invalid user admin from 4.28.195.158 port 45168 show less	Brute-Force SSH
🇰🇷 Woodie	2026-01-03 15:20:58 UTC · (10 months ago)	2026-01-03T10:20:51.778826-05:00 debian sshd[1064605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.28.195.158 2026-01-03T10:20:53.902286-05:00 debian sshd[1064605]: Failed password for invalid user a from ... show more 2026-01-03T10:20:51.778826-05:00 debian sshd[1064605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.28.195.158 2026-01-03T10:20:53.902286-05:00 debian sshd[1064605]: Failed password for invalid user a from 4.28.195.158 port 55404 ssh2 2026-01-03T10:20:56.963807-05:00 debian sshd[1064627]: Invalid user nil from 4.28.195.158 port 55204 2026-01-03T10:20:57.155789-05:00 debian sshd[1064627]: Failed none for invalid user nil from 4.28.195.158 port 55204 ssh2 2026-01-03T10:20:58.355873-05:00 debian sshd[1064632]: Invalid user admin from 4.28.195.158 port 34050 ... show less	Brute-Force SSH
🇰🇷 Woodie	2026-01-03 14:45:29 UTC · (10 months ago)	2026-01-03T09:45:25.966453-05:00 debian sshd[1058142]: Failed password for invalid user a from 4.28.195.158 port 59738 ssh2 2026-01-03T09:45:26.305784-05:00 debian sshd[1058147]: Invalid user a from 4.28.195.158 port 40438 2026-01-03T09:45:26.498583- ... show more 2026-01-03T09:45:25.966453-05:00 debian sshd[1058142]: Failed password for invalid user a from 4.28.195.158 port 59738 ssh2 2026-01-03T09:45:26.305784-05:00 debian sshd[1058147]: Invalid user a from 4.28.195.158 port 40438 2026-01-03T09:45:26.498583-05:00 debian sshd[1058147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.28.195.158 2026-01-03T09:45:28.560234-05:00 debian sshd[1058147]: Failed password for invalid user a from 4.28.195.158 port 40438 ssh2 2026-01-03T09:45:28.839333-05:00 debian sshd[1058154]: Invalid user nil from 4.28.195.158 port 59702 ... show less	Brute-Force SSH
🇰🇷 Woodie	2026-01-03 14:16:06 UTC · (10 months ago)	2026-01-03T09:16:01.073032-05:00 debian sshd[1054749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.28.195.158 2026-01-03T09:16:02.498401-05:00 debian sshd[1054749]: Failed password for invalid user a from ... show more 2026-01-03T09:16:01.073032-05:00 debian sshd[1054749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.28.195.158 2026-01-03T09:16:02.498401-05:00 debian sshd[1054749]: Failed password for invalid user a from 4.28.195.158 port 41746 ssh2 2026-01-03T09:16:04.459202-05:00 debian sshd[1054755]: Invalid user nil from 4.28.195.158 port 59188 2026-01-03T09:16:04.645988-05:00 debian sshd[1054755]: Failed none for invalid user nil from 4.28.195.158 port 59188 ssh2 2026-01-03T09:16:05.793477-05:00 debian sshd[1054757]: Invalid user admin from 4.28.195.158 port 39270 ... show less	Brute-Force SSH
🇳🇱 Alboweb B.V.	2026-01-03 14:11:34 UTC · (10 months ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇺🇸 yzfdude1	2026-01-03 13:45:40 UTC · (10 months ago)	Jan 3 06:45:35 b146-57 sshd[912022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.28.195.158 Jan 3 06:45:37 b146-57 sshd[912022]: Failed password for invalid user a from 4.28.195.158 port 53586 ssh2 Jan ... show more Jan 3 06:45:35 b146-57 sshd[912022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.28.195.158 Jan 3 06:45:37 b146-57 sshd[912022]: Failed password for invalid user a from 4.28.195.158 port 53586 ssh2 Jan 3 06:45:39 b146-57 sshd[912024]: Invalid user nil from 4.28.195.158 port 45664 ... show less	Brute-Force SSH
Anonymous	2026-01-03 13:27:40 UTC · (10 months ago)	(sshd) Failed SSH login from 4.28.195.158 (US/United States/-)	Brute-Force SSH
🇧🇬 OHOST.BG	2026-01-03 13:26:19 UTC · (10 months ago)	Jan 3 15:26:14 mirrors sshd[1575458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.28.195.158 Jan 3 15:26:16 mirrors sshd[1575458]: Failed password for invalid user a from 4.28.195.158 port 52528 ssh2 J ... show more Jan 3 15:26:14 mirrors sshd[1575458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.28.195.158 Jan 3 15:26:16 mirrors sshd[1575458]: Failed password for invalid user a from 4.28.195.158 port 52528 ssh2 Jan 3 15:26:18 mirrors sshd[1575576]: Invalid user nil from 4.28.195.158 port 42778 Jan 3 15:26:18 mirrors sshd[1575576]: Failed none for invalid user nil from 4.28.195.158 port 42778 ssh2 Jan 3 15:26:19 mirrors sshd[1575679]: Invalid user admin from 4.28.195.158 port 47800 ... show less	Brute-Force SSH
🇩🇪 iNetWorker	2026-01-03 13:10:02 UTC · (10 months ago)	firewall-block, port(s): 22/tcp, 2222/tcp	Port Scan
Anonymous	2026-01-03 12:57:59 UTC · (10 months ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-03 12:52:12 UTC · (10 months ago)	(sshd) Failed SSH login from 4.28.195.158 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 3 06:51:55 13617 sshd[29352]: Did not receive identification string from 4.28.195.158 port 47218 Jan 3 06:5 ... show more (sshd) Failed SSH login from 4.28.195.158 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 3 06:51:55 13617 sshd[29352]: Did not receive identification string from 4.28.195.158 port 47218 Jan 3 06:51:55 13617 sshd[29353]: Invalid user a from 4.28.195.158 port 47438 Jan 3 06:51:57 13617 sshd[29353]: Failed password for invalid user a from 4.28.195.158 port 47438 ssh2 Jan 3 06:51:58 13617 sshd[29355]: Invalid user nil from 4.28.195.158 port 33500 Jan 3 06:51:58 13617 sshd[29357]: Invalid user admin from 4.28.195.158 port 34946 show less	Brute-Force SSH

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.158.95.179

🇸🇬 194.233.94.40

🇳🇱 193.176.31.156

🇬🇧 157.22.124.232

🇺🇸 109.105.209.20

🇺🇸 49.51.47.100

🇺🇸 2602:fa59:10:62::1:0

🇫🇷 213.44.226.22

🇺🇸 199.165.159.49

🇲🇦 196.74.112.213

🇳🇱 193.176.31.151

🇷🇺 188.243.244.124

🇺🇸 172.110.223.178

🇪🇨 157.100.199.156

🇺🇸 147.93.179.130

🇫🇮 130.49.79.135

🇳🇱 91.92.47.5

🇩🇪 43.157.81.38

🇫🇮 35.228.13.200

🇷🇴 2.57.121.25