49.158.28.115

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
88 reports
58 reporters · latest 12 hours ago
ISP
TFN MEDIA CO., LTD.
Usage Type
Fixed Line ISP
ASN
AS24164
Domain Name
tfn.net.tw
Country
🇹🇼 Taiwan
City
Banqiao, Taipei
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
88 from 58 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 23 🇬🇧 United Kingdom of Great Britain and Northern Ireland 9 🇫🇷 France 7
Most common categories Brute-Force 73 Email Spam 13 Hacking 12 Port Scan 6 Exploited Host 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=90, sources=1)
Hacking Brute-Force SSH
Anonymous
Unauthorized SSH login attempts
Brute-Force SSH
🇫🇷 UM3
Exim Auth Failed
Brute-Force
🇬🇧 Joe-Mark
Found list.rtbh.com.tr (Remote Triggered Black Hole) . proto=tcp . spt=57784 . dpt=25 . NFTABLES .
Email Spam
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 49.158.28.115 2026-11-01T22:12:28+0100 warning: unknown[49.158.28.115]: SASL authentication failed
Brute-Force
🇩🇪 LRob
SMTP AUTH probe | 2026-10-31 08:49 UTC
Port Scan
🇩🇪 tentwentyfour
Blocked for probing for SASL accounts (Email)
Brute-Force
Anonymous
hacking
Hacking
🇩🇪 phil2k
Brute-Force Email Spam DDoS Attack
Anonymous
Blocked by ModSec and CSF
Port Scan
🇷🇸 Smel
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
Email Spam Hacking Brute-Force
🇩🇪 phil2k
Email Spam Brute-Force
🇯🇵 tttomomi
Repeated failed SMTP AUTH attempts (SASL) against our mail server. Usernames attempted: tqtngr.
Brute-Force
🇦🇺 electronico
Brute-Force Email Spam
Anonymous
hacking
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇰 202.166.164.166
🇬🇹 200.115.122.18
🇦🇷 190.175.12.96
🇫🇷 169.58.83.183
🇭🇰 152.32.212.224
🇩🇪 104.248.250.2
🇮🇩 103.168.136.2
🇺🇸 45.156.129.71
🇮🇩 36.92.77.209
🇳🇱 192.253.248.229
🇳🇱 185.242.226.60
🇺🇸 173.8.229.146
🇺🇸 172.174.46.118
🇧🇷 154.80.128.170
🇵🇰 144.48.132.207
🇮🇷 130.193.77.236
🇻🇳 103.172.236.241
🇷🇺 85.93.45.33
🇳🇱 77.239.124.158
🇺🇸 70.169.12.233
feedback