49.0.3.161

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
53% Elevated
43 reports
26 reporters · latest 14 hours ago
ISP
Talita Mountain resort Hotel
Usage Type
Fixed Line ISP
ASN
AS55701
Domain Name
as.net.id
Country
🇮🇩 Indonesia
City
Bogor, West Java
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
43 from 26 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 9 🇺🇸 United States of America 8 🇬🇧 United Kingdom of Great Britain and Northern Ireland 2
Most common categories Bad Web Bot 9 Email Spam 8 Brute-Force 4 Port Scan 3 Hacking 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Email spam
Email Spam
Anonymous
Email spam
Email Spam
🇺🇸 adnscom.com
IPS trigger: smtpin scanning/attack
Brute-Force Hacking
🇩🇪 jasperedv.de
Failed IMAP Login - Brutforcing
Email Spam Brute-Force
🇩🇪 nyuuzyou
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-03T11:31:49Z.
Bad Web Bot
🇩🇪 wlt-blocker
Spam with a high level and/or caught by honeypot detected
Email Spam
🇨🇭 backslash
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
Bad Web Bot
🇩🇪 filstal.org
CrowdSec: crowdsecurity/postfix-helo-rejected
Email Spam
🇩🇪 eposs-it.de
Blocked by os-abuseipdb; 9 hits, proto=tcp, ports=25
Port Scan Hacking
Anonymous
Brute-Force Email Spam
🇩🇪 filstal.org
CrowdSec: crowdsecurity/postfix-helo-rejected
Email Spam
Anonymous
SpamAssassin score 16.7 exceeded block threshold 15.0
Email Spam
🇵🇹 rnl
postfix (unknown user, SPF fail or relay access denied)
Brute-Force
🇷🇺 AbuseIPDB informer
nfdump top talker: 49.0.3.161 | first seen 2026-10-09 11:41:57.760 | duration 00:00:00.090 | flows=4 | packets=114576 | bytes=88.0 M | pps=1271 | bps=7.8 M | bpp=767 | proto=any
DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer
nfdump top talker: 49.0.3.161 | first seen 2026-10-08 13:28:37.504 | duration 00:00:00.082 | flows=1 | packets=26598 | bytes=21.2 M | pps=321 | bps=2.1 M | bpp=798 | proto=any
DDoS Attack Port Scan Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 194.5.82.142
🇸🇬 172.71.81.63
🇲🇾 202.165.25.206
🇨🇴 186.119.165.25
🇸🇬 172.71.81.64
🇷🇺 93.120.173.145
🇺🇸 91.230.168.110
🇨🇭 209.99.187.157
🇫🇷 185.162.233.8
🇧🇩 103.17.180.146
🇩🇪 85.155.14.246
🇨🇳 60.12.5.190
🇸🇬 47.82.8.242
🇸🇬 47.79.10.82
🇦🇷 191.103.8.243
🇺🇸 147.185.132.196
🇩🇪 69.5.169.246
🇺🇸 57.141.20.28
🇵🇰 39.34.3.205
🇺🇸 35.235.173.188
feedback