JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.207.48.249

94.207.48.249 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 78%: ?

78%

ISP	Emirates Integrated Telecommunications Company PJSC
Usage Type	Fixed Line ISP
ASN	AS15802
Domain Name	du.ae
Country	🇦🇪 United Arab Emirates
City	Dubai, Dubai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.207.48.249

Whois 94.207.48.249

IP Abuse Reports for 94.207.48.249:

This IP address has been reported a total of 26 times from 19 distinct sources. 94.207.48.249 was first reported on July 2nd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-08-21 14:37:39 (2 days ago)	AutoBlock: 📡 Port 22 Scan (Non Decay-Based) - 📊 Admin Panel Scanning (Decay-Based)	Port Scan Bad Web Bot Web App Attack SSH
Anonymous	2026-08-19 11:35:37 (4 days ago)	Portscan: TCP/22, TCP/990, TCP/222, TCP/2222, TCP/220, TCP/25, TCP/2525, TCP/26, TCP/3535	Port Scan
Anonymous	2026-08-19 10:07:13 (4 days ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=19	Hacking
Anonymous	2026-08-19 09:04:03 (4 days ago)	7x Dovecot auth failed (on 2 different adresses)	Brute-Force
🇮🇱 Dolphi	2026-08-18 08:52:57 (5 days ago)	Mail server brute force	Email Spam Brute-Force
🇧🇪 voormedia	2026-08-16 15:29:05 (1 week ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇮🇩 bps-statistics	2026-08-14 16:29:55 (1 week ago)	WP Login Scan Activities: "2026-08-14T23:29:55.222+07:00" "/wp-login.php" "94.207.48.249" "Mozilla/5 ... show more WP Login Scan Activities: "2026-08-14T23:29:55.222+07:00" "/wp-login.php" "94.207.48.249" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:165.6) Gecko/20100601 Firefox/115.0" show less	Web App Attack
🇩🇪 xortex	2026-08-14 10:08:28 (1 week ago)	sent several mails to non existent mailboxes, brute force attack	Email Spam Brute-Force
🇧🇾 lns.bz	2026-08-14 10:02:00 (1 week ago)	SSH bruteforce [BY]	SSH
🇧🇪 voormedia	2026-08-08 17:27:02 (2 weeks ago)	Accessed trap at '/wp-login.php'	Web App Attack
Anonymous	2026-08-08 14:20:01 (2 weeks ago)	Brute Force User Attack SMTP	Brute-Force
🇺🇸 bigscoots.com	2026-08-05 13:20:33 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 94.207.48.249 (AE/United Arab Emirates/-): 5 in the last 3600 ... show more (smtpauth) Failed SMTP AUTH login from 94.207.48.249 (AE/United Arab Emirates/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-08-05 09:17:06 SMTP call from [94.207.48.249]:61361 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f?\t?", NULL) 2026-08-05 09:17:08 dovecot_plain authenticator failed for H=(DESKTOP-9FSL8PC) [94.207.48.249]:60737: 535 Incorrect authentication data 2026-08-05 09:17:19 dovecot_plain authenticator failed for H=(DESKTOP-9FSL8PC) [94.207.48.249]:29741: 535 Incorrect authentication data 2026-08-05 09:20:21 dovecot_plain authenticator failed for H=(DESKTOP-9FSL8PC) [94.207.48.249]:56475: 535 Incorrect authentication data ([email protected]) 2026-08-05 09:20:29 dovecot_plain authenticator failed for H=(DESKTOP-9FSL8PC) [94.207.48.249]:39965: 535 Incorrect authentication data (set_id=password) show less	Brute-Force SSH
🇮🇩 bps-statistics	2026-08-05 11:23:01 (2 weeks ago)	WP Login Scan Activities: "2026-08-05T18:23:01.447+07:00" "/wp-login.php" "94.207.48.249" "Mozilla/5 ... show more WP Login Scan Activities: "2026-08-05T18:23:01.447+07:00" "/wp-login.php" "94.207.48.249" "Mozilla/5.0 (Linux; Android 10; SM-S911B Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.4 Chrome/132.0.6834.156 Mobile Safari/537.36 [FB_IAB/FB4A;FBAV/498.1.0.64.74;IABMV/1;]" show less	Web App Attack
🇮🇩 xveil	2026-08-04 19:18:40 (2 weeks ago)	2026-08-05T02:18:38.541378 mail-honeypot postfix/submission/smtpd[16673]: warning: unknown[94.207.48 ... show more 2026-08-05T02:18:38.541378 mail-honeypot postfix/submission/smtpd[16673]: warning: unknown[94.207.48.249]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 bigscoots.com	2026-08-04 11:55:29 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 94.207.48.249 (AE/United Arab Emirates/-): 5 in the last 3600 ... show more (smtpauth) Failed SMTP AUTH login from 94.207.48.249 (AE/United Arab Emirates/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-08-04 07:52:05 SMTP call from [94.207.48.249]:65122 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f?\t?", NULL) 2026-08-04 07:52:07 dovecot_plain authenticator failed for H=(DESKTOP-9FSL8PC) [94.207.48.249]:64444: 535 Incorrect authentication data 2026-08-04 07:52:18 dovecot_plain authenticator failed for H=(DESKTOP-9FSL8PC) [94.207.48.249]:34611: 535 Incorrect authentication data 2026-08-04 07:55:20 dovecot_plain authenticator failed for H=(DESKTOP-9FSL8PC) [94.207.48.249]:60742: 535 Incorrect authentication data ([email protected]) 2026-08-04 07:55:27 dovecot_plain authenticator failed for H=(DESKTOP-9FSL8PC) [94.207.48.249]:60922: 535 Incorrect authentication data (set_id=zackchambers97) show less	Brute-Force SSH

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.124.219.103

🇮🇩 103.125.103.201

🇷🇴 92.118.39.229

🇱🇹 213.176.26.19

🇩🇪 195.201.27.50

🇩🇪 167.94.146.32

🇺🇸 143.198.150.150

🇷🇺 95.79.108.51

🇳🇱 91.92.42.224

🇨🇴 69.6.234.27

🇺🇸 47.77.233.191

🇧🇪 35.210.61.208

🇪🇬 196.218.16.52

🇳🇱 193.25.217.25

🇭🇰 182.16.91.250

🇦🇷 181.45.132.132

🇷🇺 176.214.44.164

🇳🇱 172.217.40.30

🇺🇸 172.98.32.232

🇨🇳 112.29.68.22