This IP address has been reported a total of
6,560
times from
413 distinct
sources.
158.94.211.49 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-08-21T12:43:53.152882+02:00 <masked> exim[228650].notice: fixed_login authenticator failed for ...
show more2026-08-21T12:43:53.152882+02:00 <masked> exim[228650].notice: fixed_login authenticator failed for (User) [158.94.211.49]: 535 Incorrect authentication data (set_id=user)
show less
2026-08-21T08:55:32.314878+02:00 mx postfix/dnsblog[7211]: addr 158.94.211.49 listed by domain zen.s ...
show more2026-08-21T08:55:32.314878+02:00 mx postfix/dnsblog[7211]: addr 158.94.211.49 listed by domain zen.spamhaus.org as 127.0.0.4
2026-08-21T08:55:32.314971+02:00 mx postfix/dnsblog[7211]: addr 158.94.211.49 listed by domain zen.spamhaus.org as 127.0.0.9
2026-08-21T08:55:32.315075+02:00 mx postfix/dnsblog[7211]: addr 158.94.211.49 listed by domain zen.spamhaus.org as 127.0.0.2
...
show less
2026-08-20T20:02:33.984149+02:00 mx postfix/dnsblog[741494]: addr 158.94.211.49 listed by domain zen ...
show more2026-08-20T20:02:33.984149+02:00 mx postfix/dnsblog[741494]: addr 158.94.211.49 listed by domain zen.spamhaus.org as 127.0.0.2
2026-08-20T20:02:33.984209+02:00 mx postfix/dnsblog[741494]: addr 158.94.211.49 listed by domain zen.spamhaus.org as 127.0.0.3
2026-08-20T20:02:33.984249+02:00 mx postfix/dnsblog[741494]: addr 158.94.211.49 listed by domain zen.spamhaus.org as 127.0.0.9
...
show less
Automated SMTP detection. Source IP 158.94.211.49 produced 6 failed SMTP AUTH related events (535) w ...
show moreAutomated SMTP detection. Source IP 158.94.211.49 produced 6 failed SMTP AUTH related events (535) within the last 1 hour(s). Top: 535=6 This pattern strongly indicates brute-force / credential-stuffing activity against SMTP AUTH.
show less
Aug 20 13:01:50 [postfix/smtpd] disconnect from unknown[158.94.211.49] ehlo=1 auth=0/1 quit=1 comman ...
show moreAug 20 13:01:50 [postfix/smtpd] disconnect from unknown[158.94.211.49] ehlo=1 auth=0/1 quit=1 commands=2/3
Aug 20 13:12:35 [postfix/smtpd] disconnect from unknown[158.94.211.49] ehlo=1 auth=0/1 quit=1 commands=2/3
Aug 20 13:23:55 [postfix/smtpd] disconnect from unknown[158.94.211.49] ehlo=1 auth=0/1 quit=1 commands=2/3
...
show less
Aug 20 12:47:56 [postfix/smtpd] disconnect from unknown[158.94.211.49] ehlo=1 auth=0/1 quit=1 comman ...
show moreAug 20 12:47:56 [postfix/smtpd] disconnect from unknown[158.94.211.49] ehlo=1 auth=0/1 quit=1 commands=2/3
Aug 20 12:58:46 [postfix/smtpd] disconnect from unknown[158.94.211.49] ehlo=1 auth=0/1 quit=1 commands=2/3
...
show less
2026-08-20T12:47:44.307601+02:00 hsx2 postfix/postscreen[218215]: PREGREET 11 after 0.05 from [158.9 ...
show more2026-08-20T12:47:44.307601+02:00 hsx2 postfix/postscreen[218215]: PREGREET 11 after 0.05 from [158.94.211.49]:52295: EHLO User\r\n
...
show less
2026-08-20T09:55:04.355630+02:00 mx postfix/dnsblog[638179]: addr 158.94.211.49 listed by domain zen ...
show more2026-08-20T09:55:04.355630+02:00 mx postfix/dnsblog[638179]: addr 158.94.211.49 listed by domain zen.spamhaus.org as 127.0.0.9
2026-08-20T09:55:04.355730+02:00 mx postfix/dnsblog[638179]: addr 158.94.211.49 listed by domain zen.spamhaus.org as 127.0.0.3
2026-08-20T09:55:04.355803+02:00 mx postfix/dnsblog[638179]: addr 158.94.211.49 listed by domain zen.spamhaus.org as 127.0.0.2
...
show less
Email Spam
Anonymous
2026-08-20T05:03:43.230318+02:00 zelda postfix/smtpd[3571850]: warning: unknown[158.94.211.49]: SASL ...
show more2026-08-20T05:03:43.230318+02:00 zelda postfix/smtpd[3571850]: warning: unknown[158.94.211.49]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=spam
show less
Brute-Force
Showing 1 to
15
of 6560 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩