JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.158.16.91

49.158.16.91 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 100%: ?

100%

ISP	TFN MEDIA CO., LTD.
Usage Type	Fixed Line ISP
ASN	AS24164
Hostname(s)	49-158-16-91.dynamic.elinx.com.tw
Domain Name	tfn.net.tw
Country	🇹🇼 Taiwan
City	Banqiao, Taipei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.158.16.91

Whois 49.158.16.91

IP Abuse Reports for 49.158.16.91:

This IP address has been reported a total of 63 times from 48 distinct sources. 49.158.16.91 was first reported on June 21st 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-07-20 03:20:19 (2 minutes ago)	SMTP AUTH attack	Brute-Force
🇩🇪 mnpx	2026-07-20 01:49:47 (1 hour ago)	SMTP brute forcing (3× over 2h:54m); first seen here 2026-06-23T05:36Z	Brute-Force
🇩🇪 FeG Deutschland	2026-07-20 00:46:04 (2 hours ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇬🇧 stom	2026-07-20 00:21:25 (3 hours ago)	2026-07-20T00:21:23.244423ls.fionamaguire-art.com postfix/smtps/smtpd[11744]: warning: unknown[49.15 ... show more 2026-07-20T00:21:23.244423ls.fionamaguire-art.com postfix/smtps/smtpd[11744]: warning: unknown[49.158.16.91]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force Email Spam
🇩🇪 NetShield-DE	2026-07-19 23:07:57 (4 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-07-20T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-07-20T01:07:01+0200. Last: 2026-07-20T01:07:01+0200. Samples: - 2026-07-19 08:03:55,979 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 49.158.16.91 show less	Web App Attack
🇩🇪 singertc	2026-07-19 22:29:54 (4 hours ago)	2026-07-20 00:21:01 login_server authenticator failed for ([125.61.5.74]) [49.158.16.91]: 535 Incorr ... show more 2026-07-20 00:21:01 login_server authenticator failed for ([125.61.5.74]) [49.158.16.91]: 535 Incorrect authentication data ([email protected]) 2026-07-20 00:29:53 login_server authenticator failed for (syn-071-013-124-166.biz.spectrum.com) [49.158.16.91]: 535 Incorrect authentication data ([email protected]) ... show less	Hacking Email Spam
🇦🇺 brocococonut	2026-07-19 22:19:10 (5 hours ago)	2026-07-20 02:41:03 dovecot_login authenticator failed for (dsl-hkibng42-50dfa7-240.dhcp.inet.fi) [4 ... show more 2026-07-20 02:41:03 dovecot_login authenticator failed for (dsl-hkibng42-50dfa7-240.dhcp.inet.fi) [49.158.16.91]: 535 Incorrect authentication data ([email protected]) 2026-07-20 02:41:03 dovecot_login authenticator failed for (dsl-hkibng42-50dfa7-240.dhcp.inet.fi) [49.158.16.91]: 535 Incorrect authentication data ([email protected]) 2026-07-20 03:07:13 dovecot_login authenticator failed for (ipmapt-72-195-114-188.oc.oc.cox.net) [49.158.16.91]: 535 Incorrect authentication data (set_id=management) 2026-07-20 03:07:13 dovecot_login authenticator failed for (ipmapt-72-195-114-188.oc.oc.cox.net) [49.158.16.91]: 535 Incorrect authentication data (set_id=management) 2026-07-20 08:19:10 dovecot_login authenticator failed for ([114.94.211.10]) [49.158.16.91]: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force
🇩🇪 Paul Smith	2026-07-19 21:19:09 (6 hours ago)	Email Auth Brute force attack 1/1 in last day	Brute-Force
🇺🇸 oukat	2026-07-19 20:15:57 (7 hours ago)	attempted login as non-existent POP3/IMAP/SMTP-submission user	Brute-Force
🇫🇷 Kraften	2026-07-19 19:54:05 (7 hours ago)	Postfix SASL issue ...	DDoS Attack Brute-Force
🇩🇪 NetShield-DE	2026-07-19 19:08:01 (8 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-07-19T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-07-19T21:07:02+0200. Last: 2026-07-19T21:07:02+0200. Samples: - 2026-07-19 08:03:55,979 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 49.158.16.91 show less	Web App Attack
🇩🇪 www.fransveldman.world	2026-07-19 16:14:56 (11 hours ago)	Jul 19 16:14:55 mail postfix/submission/smtpd[1975478]: warning: unknown[49.158.16.91]: SASL LOGIN a ... show more Jul 19 16:14:55 mail postfix/submission/smtpd[1975478]: warning: unknown[49.158.16.91]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 19 16:14:56 mail postfix/submission/smtpd[1975478]: lost connection after AUTH from unknown[49.158.16.91] ... show less	Brute-Force Email Spam
🇬🇧 iss-security-operations	2026-07-19 16:05:43 (11 hours ago)	Seen attempting a bruteforce against SMTP services	Brute-Force
🇩🇪 NetShield-DE	2026-07-19 14:07:59 (13 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-07-19T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-07-19T16:07:02+0200. Last: 2026-07-19T16:07:02+0200. Samples: - 2026-07-19 08:03:55,979 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 49.158.16.91 show less	Web App Attack
🇬🇷 setupgr	2026-07-19 13:06:58 (14 hours ago)	49.158.16.91 (TW/Taiwan/Taiwan/Neihu District/-/[AS24164 UBBNET-AS-TW UNION BROADBAND NETWORK]), 2 d ... show more 49.158.16.91 (TW/Taiwan/Taiwan/Neihu District/-/[AS24164 UBBNET-AS-TW UNION BROADBAND NETWORK]), 2 distributed smtpauth attacks on account [[email protected]] in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: 2026-07-19 16:06:55 dovecot_login authenticator failed for H=(nsg-corporate-110.116.187.122.airtel.in) [49.158.16.91]:44862: 535 Incorrect authentication data ([email protected]) 2026-07-19 11:17:27 dovecot_login authenticator failed for H=([49.124.153.31]) [113.203.193.106]:54299: 535 Incorrect authentication data ([email protected]) IP Addresses Blocked: show less	Port Scan

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 210.212.136.3

🇿🇦 197.101.221.208

🇸🇪 171.25.158.74

🇭🇰 156.225.1.98

🇫🇷 91.231.89.249

🇩🇪 64.89.163.86

🇫🇮 46.29.26.195

🇳🇱 45.148.10.157

🇺🇸 34.66.252.77

🇺🇸 20.84.58.231

🇺🇸 20.83.165.36

🇺🇸 2607:f8b0:4023:1004::12e

🇮🇳 223.185.56.111

🇭🇰 199.45.155.69

🇸🇪 185.195.233.199

🇲🇽 177.229.197.38

🇩🇪 167.233.74.177

🇮🇷 151.234.87.1

🇺🇸 146.190.153.30

🇨🇦 85.217.149.60