49.12.148.120
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Hetzner Online GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS24940
- Hostname(s)
- static.120.148.12.49.clients.your-server.de
- Domain Name
- hetzner.com
- Country
- 🇩🇪 Germany
- City
- Falkenstein, Saxony
Abuse Reports
Total reports
43 from
28 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 NetGuard |
|
Web App Attack | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: SIP/VoIP fraud. 8 events observed. Reported automatically from a honeypot sensor.
|
Fraud VoIP Brute-Force | |
| 🇺🇸 ShadowWhisperer |
SIP port scan / probe. OPTIONS probe ua=
|
Port Scan Fraud VoIP | |
| 🇬🇧 Axel |
Blocked by UFW on BGPGB [31463/tcp] | SPT: 7506 | TTL: 54 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 4 hits on ports [5060] (automated)
|
Port Scan Hacking | |
| Anonymous |
|
Port Scan | |
| 🇮🇹 Francesco Ippoliti |
[Nov 3 01:01:03] NOTICE[285292] res_pjsip/pjsip_distributor.c: Request 'OPTIONS' from '<sip:1@1>' failed for '49.12.148.120:58479' (callid: 1) - No matching endpoint found
...
|
Brute-Force Port Scan | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-27 UTC.
|
Brute-Force | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: SIP/VoIP fraud. 6 events observed. Reported automatically from a honeypot sensor.
|
Fraud VoIP Brute-Force | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 13 malicious events (exploit_attempt, sip_bruteforce) detected.
|
Hacking Brute-Force Web App Attack | |
| 🇺🇸 NetGuard |
|
Web App Attack | |
| 🇮🇹 Francesco Ippoliti |
|
Brute-Force Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 2 hits on ports [53] (automated)
|
Port Scan | |
| 🇹🇷 pashait |
Auto-blocked by Seczar SecureOps — DNS Flood / Tunneling Suspected (531 events in 5min) at 2026-10-21 20:27
|
Hacking | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown